# Software and Kubernetes ecosystem security vulnerabilities > Live situation record from CLSTR: https://clstr.news/situations/software-and-kubernetes-ecosystem-security-vulnerabilities > Updated: 2026-10-08T00:24:03.000Z. Sources: 4. Developments: 2. Security vulnerabilities have been identified across various software ecosystems, specifically impacting Kubernetes and Drupal. In late September, Kubernetes reported two medium-rated advisories involving a confused deputy attack in the StatefulSet controller and an NTLM coercion vulnerability on Windows nodes. Simultaneously, a high-risk vulnerability in the Drupal ecosystem was identified, affecting 16 contributed projects and potentially allowing for arbitrary code execution and data exposure. By early October, more severe flaws were reported regarding Dell Container Storage Modules (CSM) used within Kubernetes. One critical vulnerability, CVE-2026-63688, carries a CVSS score of 10.0 and allows unauthenticated remote code execution. These flaws could permit attackers to gain administrative control over Kubernetes storage planes, leading to risks such as data exfiltration and ransomware deployment across an estimated 2,000 clusters. ## Timeline ### 2026-10-08: Dell Container Storage Modules face critical Kubernetes vulnerabilities Critical vulnerabilities in Dell Container Storage Modules, including a CVSS 10.0 flaw, allow unauthenticated remote attackers to gain full administrative control over Kubernetes storage infrastructure. 2 sources. https://clstr.news/cluster/dell-container-storage-modules-face-critical-kubernetes-vulnerabilities ### 2026-09-30: Kubernetes and Drupal face new security vulnerabilities Security advisories have been issued for Kubernetes and Drupal, addressing vulnerabilities ranging from medium to high risk, including potential code execution and cross-namespace attacks. 2 sources. https://clstr.news/cluster/kubernetes-and-drupal-face-new-security-vulnerabilities --- Cite as: Software and Kubernetes ecosystem security vulnerabilities. CLSTR, https://clstr.news/situations/software-and-kubernetes-ecosystem-security-vulnerabilities