CVE-2026-54489

critical · 9.1

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This vulnerability is considered critical as it allows an unauthenticated attacker to obtain active session credentials and fully impersonate authenticated users, including administrators. Dell recommends customers to upgrade at the earliest opportunity.

9.1

CVSS

0.5%

EPSS (exploit prob.)

40th

EPSS percentile

2026-08-06

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
dell	virtual_storage_integrator	< 10.11.1.0

Check a specific version with /api/v1/cve/match.

References

https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-54489