{"id":"CVE-2026-54472","published":"2026-10-06T15:17:18.483","lastModified":"2026-10-08T14:17:15.960","description":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-798"],"vendors":["dell"],"products":["container storage modules"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw involves hard-coded credentials in Dell Container Storage Modules versions prior to 1.18.0, allowing unauthenticated attackers to gain access and potentially disclose sensitive information.","exploitability":"Exploitation is relatively straightforward given remote access, as no authentication is required.","blast_radius":"If exploited, the impact could be significant, as it could lead to information disclosure affecting the entire system.","remediation":"Upgrade to version 1.18.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["info-disc","auth-bypass","remote","cve"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:02.196Z"}}