CVE-2026-70414

Summary

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected Software

Weaknesses

• CWE-256: CWE-256: Plaintext Storage of a Password

References

• https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities

• ←Previous
• Next→