CVE-2026-54472

Critical9.8 Published on Oct 6, 2026

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-798

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

Vulnerabilities

Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes

Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.

Oct 2, 202619:59 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes