CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-70414

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 0.8%

CVSS Severity

CVSS v3 Score 5.5

References

https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities

Products affected by CVE-2026-70414

Dell » Command|configure » Version: 3.0

cpe:2.3:a:dell:command|configure:3.0
Dell » Command|configure » Version: 3.1

cpe:2.3:a:dell:command|configure:3.1
Dell » Command|configure » Version: 3.1.2

cpe:2.3:a:dell:command|configure:3.1.2
Dell » Command|configure » Version: 3.2

cpe:2.3:a:dell:command|configure:3.2
Dell » Command|configure » Version: 3.3

cpe:2.3:a:dell:command|configure:3.3
Dell » Command|configure » Version: 4.0

cpe:2.3:a:dell:command|configure:4.0
Dell » Command|configure » Version: 4.1

cpe:2.3:a:dell:command|configure:4.1
Dell » Command|configure » Version: 4.11.0

cpe:2.3:a:dell:command|configure:4.11.0
Dell » Command|configure » Version: 4.2.1

cpe:2.3:a:dell:command|configure:4.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-70414

Products

Pricing

Contact Us