CVE-2026-54472: CWE-798: Use of Hard-coded Credentials in Dell Container Storage Modules

CVE-2026-54472 describes a vulnerability in Dell Container Storage Modules (CSM) prior to version 1.18.0, where hard-coded credentials exist within the csm-docs component. This security weakness enables an unauthenticated attacker with remote network access to exploit these credentials, potentially resulting in unauthorized information disclosure. The CVSS v3.1 base score is 9.8, reflecting a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An unauthenticated remote attacker can exploit the hard-coded credentials to gain unauthorized access to the affected Dell Container Storage Modules, leading to disclosure of sensitive information and potentially full compromise of the system's confidentiality, integrity, and availability.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected modules and monitor for unauthorized access attempts.