{"id":"CVE-2026-61411","published":"2026-10-06T16:17:08.693","lastModified":"2026-10-06T19:58:37.060","description":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.","cvssScore":7.7,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-532"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Dell Container Storage Modules suffers from a log file information disclosure vulnerability where sensitive data gets written to log files, potentially exposing credentials or other confidential information to low-privileged attackers who can access the system remotely.","exploitability":"Exploitation requires a low-privileged attacker with remote access to the system, which is moderately easy to achieve, and involves writing sensitive data to log files that can then be accessed by the same attacker.","blast_radius":"If exploited, this vulnerability could lead to exposure of sensitive information in log files, potentially allowing attackers to gain additional credentials or access to other systems through the disclosed information.","remediation":"Upgrade to version 1.18.0 or later to remediate the Insertion of Sensitive Information into Log File vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["logging","information-disclosure","container"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:00:49.415Z"}}