CVE-2026-61411
validatedZero produced an exploit or a check.GHSA-hp69-6g6m-vg42 ↗EUVD-2026-93460 ↗
description
Dell Container Storage Modules releases earlier than 1.18.0 may record sensitive information in log files. A remotely connected attacker with low-level privileges could use this condition to disclose information.
mitigation
Upgrade Dell Container Storage Modules to version 1.18.0 or later. Restrict access to the service and to its logs until the upgrade is complete.
fixed in 1.18.0 or later
outcome
Contextual check: a technique exists and was validated, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-06 15:14Zghsa: trigger signal, started the run
- 2026-10-06 15:14Zcve.org record for CVE-2026-61411
this entry in the feed
GET /api/v1/feed/CVE-2026-61411
{ "etk_id": "ETK-2026-840", "cve_id": "CVE-2026-61411", "display_id": "CVE-2026-61411", "ghsa_id": "GHSA-hp69-6g6m-vg42", "euvd_id": "EUVD-2026-93460", "status": "published", "anchor_state": "anchored", "title": "Sensitive information logging in Dell Container Storage Modules", "summary": "Dell Container Storage Modules releases earlier than 1.18.0 may record sensitive information in log files. A remotely connected attacker with low-level privileges could use this condition to disclose information.", "mitigation": "Upgrade Dell Container Storage Modules to version 1.18.0 or later. Restrict access to the service and to its logs until the upgrade is complete.", "vendor": "dell", "product": "Container Storage Modules", "affected": [ { "affected_notes": [ ">= 0, < 1.18.0 or later" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [ "1.18.0 or later" ], "package_name": "Container Storage Modules", "purl": null } ], "cwes": null, "cvss_score": 7.7, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "epss_score": 0.0038, "epss_percentile": 0.3029, "epss_asof": "2026-10-20", "automation": "contextual", "check": true, "check_confidence_basis": "assessed", "exploit": false, "pipeline_minutes": 32.54951285, "t0_at": "2026-10-06T15:14:01.271000+00:00", "signals": { "check": { "at": "2026-10-07T04:08:21.829504+00:00", "days": 0.5377379456481481, "is_lower_bound": false, "measured_at": "2026-10-06T15:14:01.271000+00:00", "url": null }, "trigger_signal": { "at": "2026-10-06T15:14:01.271000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-06T15:14:01.271000+00:00", "url": "https://github.com/advisories/GHSA-hp69-6g6m-vg42" } } }
published 2026-10-07 03:35Z
last change 2026-10-21 19:22Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.