Dell Container Storage Modules Critical Flaws Enable Unauthenticated Admin Access to Kubernetes Nodes
Multiple vulnerabilities in Dell CSM could allow threat actors to bypass authentication and gain root-level control over Kubernetes clusters.
Key Takeaways
- Dell Container Storage Modules (CSM) contain critical vulnerabilities, including CVE-2026-63688 with a CVSS score of 10.0.
- A missing authentication flaw in the csm-authorization-storage gRPC server could allow unauthenticated attackers to gain admin access.
- Root-level compromise on Kubernetes nodes is possible, with potential for full cluster takeover and data exfiltration.
Related Security News
CISA Issues Advisory for Four Critical Vulnerabilities in Monta monta.app Charging Station Software
The Cybersecurity and Infrastructure Security Agency (CISA) has published advisory ICSA-26-274-02 disclosing four vulnerabilities in Monta monta.app, a widely used electric vehicle charging station management platform. The flaws span missing authentication, lack of rate limiting on WebSocket endpoints, predictable session identifiers, and insufficiently protected credentials. All versions of the software are affected. While no active exploitation has been confirmed, the CVSS scores range from 7.5 to 9.4, classifying three as Critical and one as High severity. The advisory urges operators to enable OCPP 1.6 Security Profile 2 and apply interim mitigations such as rate limiting.
