← Back to search

CVE-2026-54472

9.8 CRITICAL

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
The flaw involves hard-coded credentials in Dell Container Storage Modules versions prior to 1.18.0, allowing unauthenticated attackers to gain access and potentially disclose sensitive information.
Exploitability
Exploitation is relatively straightforward given remote access, as no authentication is required.
Blast radius
If exploited, the impact could be significant, as it could lead to information disclosure affecting the entire system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 1.18.0 or later.
info-discauth-bypassremotecve

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

Vendors

dell

Products

container storage modules

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.