CVE-2026-70414
MediumCVSS 5.5Summary
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
Risk Assessment
Risk of password and sensitive data disclosure, potentially enabling further privilege escalation or unauthorized access.
Recommendation
Immediately update DCC to version 5.2.3.35 or later and store passwords securely (e.g., using encryption).
Other vulnerabilities in Dell Command | Configure
See all- CVE-2026-82162High
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
- CVE-2026-103778Medium
Dell Command | Configure (DCC) versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Original NVD description (English source)
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS