CVE-2026-54489
Awaiting Analysis Awaiting Analysis - Queue

Sensitive Information Disclosure in Dell Virtual Storage Integrator for VMware vSphere

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Dell

Description
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This vulnerability is considered critical as it allows an unauthenticated attacker to obtain active session credentials and fully impersonate authenticated users, including administrators. Dell recommends customers to upgrade at the earliest opportunity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-54489
EUVD
EUVD-2026-53931

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell virtual_storage_integrator to 10.11.1.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Virtual Storage Integrator for VMware vSphere Client before version 10.11.1.0 has a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could exploit this to disclose sensitive information and hijack active user sessions. The flaw allows stealing session credentials to impersonate users, including administrators, without authentication.

Impact Analysis

This vulnerability could allow attackers to access sensitive data, hijack active user sessions, and impersonate administrators. This may lead to unauthorized data access, system manipulation, or further network compromise within the affected environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage due to data breaches.

Mitigation Strategies

Upgrade Dell Virtual Storage Integrator for VMware vSphere Client to version 10.11.1.0 or later immediately to address the Sensitive Information Disclosure vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54489. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart