---
cve: "CVE-2026-76105"
severity: "HIGH"
cvss: 7.7
epss: "0.1%"
vendor: "Dell"
kev: false
exploited: false
published: "2026-10-06 16:17:10"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-11-09T07:10:44+01:00"
---

# CVE-2026-76105

> 7.7 HIGH

## Beschreibung

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

## CNA-Record (Kanon, cvelistV5)

- CNA: **dell**
- State: PUBLISHED
- Stand: 2026-10-06 19:30:04
- CNA-CVSS: **7.7** (`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Keine | good |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-330** — Use of Insufficiently Random Values
  The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

## Angriffsmuster (CAPEC)

- [CAPEC-59 — Session Credential Falsification through Prediction](https://capec.mitre.org/data/definitions/59.html) _(Severity: High)_
- [CAPEC-112 — Brute Force](https://capec.mitre.org/data/definitions/112.html) _(Severity: High)_
- [CAPEC-485 — Signature Spoofing by Key Recreation](https://capec.mitre.org/data/definitions/485.html) _(Severity: High)_

## ATT&CK-Techniken

- [T1110 — Brute Force](https://attack.mitre.org/techniques/T1110/)
- [T1552.004 — Unsecure Credentials: Private Keys](https://attack.mitre.org/techniques/T1552/004/)

## Patch verfügbar (OSV)

- c7afa0f68013764bcbcafaee72b4155c3c3a2c88 (Commit)

## Referenzen

- <https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-76105/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_