What is the CVSS score of EUVD-2026-53931?

EUVD-2026-53931 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Dell Virtual Storage Integrator are affected by EUVD-2026-53931?

Dell Virtual Storage Integrator (VSI) for VMware vSphere Client contains a critical session credential disclosure vulnerability (CVE-2026-54489, CVSS 9.8) affecting all versions prior to 10.11.1.0,…. A patch is available.

How to fix or mitigate EUVD-2026-53931?

Within 24 hours, identify all deployed VSI instances and their current versions using your virtualization inventory and Dell documentation to confirm exposure scope. Within 7 days, apply vendor-released patch version 10.11.1.0 or later to all affected VSI deployments following Dell's documented upgrade procedures, prioritizing systems managing production virtual infrastructure. Within 30 days, conduct post-patch validation to confirm all instances are updated, review VSI session logs for suspicious activity prior to patching, and audit any administrative session activity during the vulnerability window for indicators of compromise.

Dell Virtual Storage Integrator EUVD-2026-53931

| CVE-2026-54489 CRITICAL

Information Exposure (CWE-200)

2026-08-06 dell

GHSA-cm9h-9r66-mh55

VMware Information Disclosure Dell Virtual Storage Integrator For Vmware Vsphere Client

9.8

CVSS 3.1 · NVD

Severity by source

Vendor (dell) PRIMARY

CRITICAL

qualitative

NVD

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Unauthenticated network leak of session credentials enabling full user/admin impersonation, so PR:N/AC:L and high confidentiality with integrity/availability impact via takeover.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 07, 2026 - 20:12 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 07, 2026 - 20:07 vuln.today

cvss_changed

CVSS changed

Aug 07, 2026 - 20:07 NVD

9.1 (CRITICAL) 9.8 (CRITICAL)

Patch available

Aug 06, 2026 - 15:17 EUVD

Analysis Generated

Aug 06, 2026 - 15:15 vuln.today

CVE Published

Aug 06, 2026 - 13:54 cve.org

CRITICAL 9.1

DescriptionNVD

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This vulnerability is considered critical as it allows an unauthenticated attacker to obtain active session credentials and fully impersonate authenticated users, including administrators. Dell recommends customers to upgrade at the earliest opportunity.

Articles & Coverage 1

News Critical Information Disclosure in Dell VSI for VMware vSphere - CVE-2026-54489 Aug 06, 2026

AnalysisAI

Sensitive information disclosure in Dell Virtual Storage Integrator (VSI) for VMware vSphere Client, all versions prior to 10.11.1.0, lets an unauthenticated remote attacker retrieve active session credentials and hijack authenticated sessions, including those of administrators. Because stolen session tokens grant full impersonation of legitimate users, Dell rates this critical (CVSS 9.8); there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the SSVC framework flags it as automatable with total technical impact. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special conditions - remote unauthenticated exploitation (AV:N/AC:L/PR:N/UI:N) against Dell Virtual Storage Integrator for VMware vSphere Client versions prior to 10.11.1.0. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The signals are largely consistent that this is a genuine priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: upgrade Dell Virtual Storage Integrator for VMware vSphere Client to version 10.11.1.0 or later, per Dell advisory DSA-2026-335 (https://www.dell.com/support/kbdoc/en-us/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all deployed VSI instances and their current versions using your virtualization inventory and Dell documentation to confirm exposure scope. …

Threat intelligence, references, and detailed analysis are available after sign-in.