Plaintext Storage of Passwords Vulnerability in Dell CloudBoost Virtual Appliance
CVE-2026-21417

7HIGH

Key Information:

Vendor

Dell
Status
Cloudboost Virtual Appliance
Vendor
CVE Published:
27 January 2026

What is CVE-2026-21417?

The Dell CloudBoost Virtual Appliance is vulnerable due to improper storage of sensitive information, specifically passwords, in plaintext format. This vulnerability can be exploited by high-privileged attackers with remote access, which may lead to unauthorized escalation of privileges. It is critical for users to ensure their systems are updated to version 19.14.0.0 or later to mitigate this security risk.

Affected Version(s)

CloudBoost Virtual Appliance < 19.14.0.0

References

https://www.dell.com/support/kbdoc/en-us/000419894/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.