{"id":"CVE-2026-61421","published":"2026-10-06T15:17:18.767","lastModified":"2026-10-08T14:15:46.670","description":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-798"],"vendors":["dell"],"products":["container storage modules"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw involves hard-coded credentials in Dell Container Storage Modules, allowing unauthenticated attackers to gain elevated privileges.","exploitability":"Exploitation is relatively straightforward for attackers with remote access, as no authentication is required.","blast_radius":"If exploited, this could lead to full control over the storage system, potentially compromising data and operations.","remediation":"Upgrade to version 1.18.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","priv-escalation","hard-coded-credentials"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:02.848Z"}}