CVE-2026-21417CWE-256

Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability

High · published January 27, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

⚡ A high-privileged attacker could easily exploit a plaintext password storage issue in Dell CloudBoost Virtual Appliance versions prior to 19.14.0.0! 🔥 Think of this vulnerability like a vault that carelessly leaves the combination written on a sticky note inside — anyone with a remote view could just grab it and waltz right in. If exploited, an attacker could elevate their privileges and gain unauthorized access to sensitive resources, potentially wreaking havoc on your system. This is no small deal — it could lead to data breaches and significant operational disruptions, which is absolutely devastating!

Put simply

Think of this vulnerability like a vault that carelessly leaves the combination written on a sticky note inside — anyone with a remote view could just grab it and waltz right in. This vulnerability allows high-privileged attackers with remote access to exploit the plaintext storage of passwords, leading to unauthorized elevation of privileges.

What to do

If exploited, an attacker could elevate their privileges and gain unauthorized access to sensitive resources, potentially wreaking havoc on your system. This is no small deal — it could lead to data breaches and significant operational disruptions, which is absolutely devastating! To safeguard your system, patch to version 19.14.0.0 immediately. Additionally, review your password storage practices to ensure encryption is used for sensitive credentials moving forward. You've got this! Follow these steps, and you'll be back on the path to security in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-01-27T09:28Z
EPSS history
Timeline
  • 27 JAN 09:28Z
    Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability
    cvelistv5