CVE-2026-61421
waiting for further signalsZero needs more public information before it can validate it.description
Dell Container Storage Modules versions before 1.18.0 are affected by hard-coded credentials in CSM Authorization. An unauthenticated attacker with remote access may be able to elevate privileges.
mitigation
Upgrade Dell Container Storage Modules to version 1.18.0 or later.
fixed in 1.18.0 or later
outcome
No artifact: an exploit or check was attempted but could not be produced at this moment.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-02 17:02ZDell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
- 2026-10-06 14:57Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-61421
{ "etk_id": "ETK-2026-785", "cve_id": "CVE-2026-61421", "display_id": "CVE-2026-61421", "ghsa_id": null, "euvd_id": "EUVD-2026-93437", "status": "published", "anchor_state": "anchored", "title": "Hard-coded credentials in Dell CSM Authorization", "summary": "Dell Container Storage Modules versions before 1.18.0 are affected by hard-coded credentials in CSM Authorization. An unauthenticated attacker with remote access may be able to elevate privileges.", "mitigation": "Upgrade Dell Container Storage Modules to version 1.18.0 or later.", "vendor": "Dell", "product": "Container Storage Modules", "affected": [ { "affected_notes": [ ">= 0, < 1.18.0 or later" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [ "1.18.0 or later" ], "package_name": "Container Storage Modules", "purl": null } ], "cwes": [ 798 ], "cvss_score": 9.8, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss_score": 0.0034, "epss_percentile": 0.265, "epss_asof": "2026-10-20", "automation": "deterministic", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 68.52308366666666, "t0_at": "2026-10-06T14:57:50.795000+00:00", "signals": { "trigger_signal": { "at": "2026-10-06T14:57:50.795000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-06T14:57:50.795000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61421" } } }
published 2026-10-06 16:27Z
last change 2026-10-21 04:45Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.