CVE-2026-61411: CWE-532: Insertion of Sensitive Information into Log File in Dell Container Storage Modules

CVE-2026-61411 affects Dell Container Storage Modules before version 1.18.0. It involves the insertion of sensitive information into log files, which can be exploited by a low privileged attacker with remote access to disclose sensitive data. The vulnerability is classified under CWE-532. The CVSS 3.1 base score is 7.7, indicating high severity, with an attack vector of network, low attack complexity, and no user interaction required. The impact is high confidentiality loss without integrity or availability impact.

An attacker with low privileges and remote access could exploit this vulnerability to gain access to sensitive information that is improperly logged. This could lead to significant information disclosure, potentially compromising confidentiality of data handled by the affected software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided in the available data. Users should monitor Dell's official advisories for updates and apply patches once available.