All vulnerabilities
CVE-2026-70414

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerabil

Dell Command | Configure (DCC)
Open in ThreatlineRecord JSON
CVSS
5.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.10%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5.2.3.35Fixed versionCVE List
Published6 Oct 2026Updated 7 Oct 2026CVE List

What fixes it

  • 5.2.3.35Command | Configure (DCC)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Text from CVE List

Affected versions 1

  • Command | Configure (DCC)affected: all versions before 5.2.3.35CVE List

References 1