Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-54472

Dell Container Storage Modules: hard-coded credentials can lead to information disclosure

Risk score
58/100
CVSS
7.5 v3.1
Exploit chance (30 days)
0.5%
Published
6 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8
Affected
Dell Container Storage Modules before 1.18.0
Fix
Upgrade Dell Container Storage Modules to 1.18.0 or later.
Exploitation
No known exploitation

Story map

Story map: Dell Container Storage ModulesTHE FLAWSTHE FIXCVE-2026-54472Hard-coded credentials canlead to information disclosureCVSS 7.5 · EPSS 1%CVE-2026-63688Missing authenticationCVSS 10.0 · EPSS 1%CVE-2026-63692Missing authentication can leadto privilege escalationCVSS 10.0 · EPSS 1%CVE-2026-61421Hard-coded credentials canlead to privilege escalationCVSS 9.8 · EPSS 0%Upgrade Dell Container…1.18.0or later on your release lineWho is exposedDell Container Storage Modulesbefore 1.18.0AMBER · PATCH THIS WEEKDell ContainerStorage ModulesDell Container Storage Modules(CSM), versions prior to v1.18.0,contains a MissingAuthentication for CriticalFunction vulnerability in thecsm-authorization-storagegRPC server. An…Where it standsNo known exploitationCONNECTS TOSame weaknessHard-coded credentials (CWE-798)40 other warnings in 30 days →Same productEarlier Dell Container Storage Modules warnings9 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Container Storage Modules: Amber, patch this week. Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend adminis…

The flaws

  • CVE-2026-54472: Hard-coded credentials can lead to information disclosure (CVSS 7.5 · EPSS 1%)
  • CVE-2026-63688: Missing authentication (CVSS 10.0 · EPSS 1%)
  • CVE-2026-63692: Missing authentication can lead to privilege escalation (CVSS 10.0 · EPSS 1%)
  • CVE-2026-61421: Hard-coded credentials can lead to privilege escalation (CVSS 9.8 · EPSS 0%)

The fix

Upgrade Dell Container Storage Modules: 1.18.0 or later on your release line

Who is exposed: Dell Container Storage Modules before 1.18.0

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 7.5 high
  • Remotely exploitable without logging in

References

Original description

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

Last activity 6 Oct 2026. Patch Forecast updates every hour.