EXPOSURES › CVE-2026-54489
CVE-2026-54489
CRITICALDell's Virtual Storage Integrator for VMware vSphere Client versions before 10.11.1.0 has a critical unauthenticated remote vulnerability allowing session hijacking and admin impersonation.
An unauthenticated remote attacker can steal active session credentials to impersonate administrators, directly threatening DIB compliance by enabling privilege escalation and data exfiltration. Organizations must upgrade immediately to prevent session hijacking and maintain NIST 800-171 controls over access and session management.
Shame score — A critical unauthenticated remote vulnerability in a storage integrator allows full admin impersonation, indicating severe negligence in patching and access control.
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This vulnerability is considered critical as it allows an unauthenticated attacker to obtain active session credentials and fully impersonate authenticated users, including administrators. Dell recommends customers to upgrade at the earliest opportunity.