Dell Patches Two CVSS 10 Flaws in Container Storage Modules

Dell published advisory DSA-2026-448 for Container Storage Modules (CSM) fixing 24 CVEs — including multiple Critical vulnerabilities and two CVSS 10.0 authentication/authorization flaws that could expose admin credentials and allow full control of connected storage arrays or enable Kubernetes cluster compromise; organizations should upgrade to 1.18.0 or later, rotate secrets, restrict network access, and review RBAC, though Dell has not reported active exploitation.