CVE-2026-67273: CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine in Dell Container Storage Modules

CVE-2026-67273 is an improper neutralization of special elements used in a template engine vulnerability (CWE-1336) affecting Dell Container Storage Modules before version 1.18.0. This vulnerability enables a low privileged remote attacker to escalate privileges, compromising confidentiality and integrity of the system. The CVSS v3.1 base score is 9.6 with vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N, indicating network attack vector, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality and integrity without affecting availability. No vendor advisory or patch link is provided, but the affected versions are explicitly stated as prior to 1.18.0.

Successful exploitation allows a low privileged remote attacker to elevate privileges, resulting in a critical compromise of confidentiality and integrity of the affected system. Availability is not impacted. This could lead to unauthorized access to sensitive data and control over the system components running Dell Container Storage Modules.

A fix is available in Dell Container Storage Modules version 1.18.0 and later. Users should upgrade to version 1.18.0 or above to remediate this vulnerability. No additional vendor advisory or patch link is provided, so users should consult Dell's official resources for the update. There is no indication that the vulnerability is mitigated by default or that no action is required.