CVE Intelligence
Analysis AI-assisted

CVE-2026-61421: Dell Container Storage Modules - Hard-coded Credentials in CSM Authorization (CWE-798)

CVE-2026-61421 is a critical Use of Hard-coded Credentials issue (CWE-798) in the CSM Authorization component of Dell Container Storage Modules, rated CVSS 9.8 by the CNA. The record states that an unauthenticated remote attacker could potentially exploit it to elevate privileges. No fixed version is listed in the record, but the affected range ends at 1.18.0, and the vendor advisory should be checked for remediation.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

Dell Container Storage Modules is affected by CVE-2026-61421, classified as Use of Hard-coded Credentials (CWE-798) in the CSM Authorization component. The CNA, Dell, rates the issue critical with a CVSS score of 9.8.

Impact

  • According to the record, an unauthenticated attacker with remote access could potentially exploit the issue to achieve elevation of privileges.
  • The SSVC data in the record marks technical impact as total and automatable as yes.

Affected products and versions

  • Product: Dell Container Storage Modules.
  • Affected range: before 1.18.0, according to the record's version ranges.
  • The record's fixes field is empty. The affected range suggests 1.18.0 is the first unaffected release, but this should be confirmed against the Dell security advisory.

Exploitation status

The record shows this CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted. The SSVC exploitation value is none. The EPSS probability is 0.00344 with a percentile of 0.26742, dated 2026-10-23.

Remediation and mitigation

  • Review the Dell security advisory and apply the vendor update for the affected modules.
  • Plan an upgrade to 1.18.0 or later, confirming with the vendor that it addresses this issue.
  • Until patched, restrict network reachability to management and authorization components and follow vendor guidance on rotating any credentials the product relies on.

Detection guidance

  • Inventory all Dell Container Storage Modules deployments and record their installed versions.
  • Monitor authentication and authorization logs for unexpected access to CSM components from unfamiliar sources.
  • Investigate unexpected privilege or role changes in the container storage environment.

Limitations of the available information

  • The record does not describe the specific credentials involved, the affected code path, or the deployment conditions required.
  • The record contains no fixed version field, so the remediation version is inferred from the affected range endpoint.
  • Detailed vector information and vendor remediation steps are held in the source advisory and are not restated here.

Frequently asked questions

What is CVE-2026-61421?

It is a critical Use of Hard-coded Credentials issue (CWE-798) in the CSM Authorization component of Dell Container Storage Modules, rated CVSS 9.8 by the CNA.

Which versions are affected?

The record lists the affected range as before 1.18.0. Confirm the exact scope with the Dell security advisory.

Is this vulnerability being exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.

What should administrators do?

Review the Dell advisory, plan an update to 1.18.0 or later after vendor confirmation, and restrict network access to management components until patched.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.