CVE-2026-54489 is a sensitive information disclosure vulnerability (CWE-200) in Dell Virtual Storage Integrator for VMware vSphere Client versions before 10.11.1.0. An unauthenticated remote attacker can exploit this flaw to obtain active session credentials, resulting in full impersonation of authenticated users and administrators. The vulnerability has a CVSS 3.1 base score of 9.1, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No official patch or remediation level has been published yet, but Dell recommends upgrading as soon as possible.

An unauthenticated attacker can obtain sensitive session credentials, leading to complete impersonation of authenticated users including administrators. This compromises confidentiality and integrity of the affected system, potentially allowing unauthorized access and control without requiring any privileges or user interaction.

Dell recommends customers upgrade to version 10.11.1.0 or later at the earliest opportunity. Patch status is not yet confirmed—check Dell's official advisory for current remediation guidance.