What is the CVSS score of CVE-2026-21417?

CVE-2026-21417 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

Which versions of Cloudboost Virtual Appliance are affected by CVE-2026-21417?

Dell CloudBoost Virtual Appliance versions prior to 19.14.0.0 contain a vulnerability that allows high-privileged attackers to extract plaintext passwords and escalate privileges.

How to fix or mitigate CVE-2026-21417?

Within 24 hours: Inventory all CloudBoost appliances and identify which are running vulnerable versions (pre-19.14.0.0). Within 7 days: Implement network segmentation to restrict administrative access to CloudBoost appliances and enforce multi-factor authentication for all administrative accounts. Within 30 days: Contact Dell for patch availability and plan immediate deployment upon release; prioritize this as a critical update.

Cloudboost Virtual Appliance CVE-2026-21417

HIGH

Plaintext Storage of a Password (CWE-256)

2026-01-27 security_alert@emc.com

Information Disclosure Dell Cloudboost Virtual Appliance

7.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 10:15 nvd

HIGH 7.0

DescriptionCVE.org

Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

AnalysisAI

Dell CloudBoost Virtual Appliance versions before 19.14.0.0 store sensitive passwords in plaintext, allowing authenticated remote attackers to retrieve credentials and escalate privileges. This vulnerability carries a high availability impact alongside confidentiality and integrity concerns, though exploitation requires substantial technical complexity. No patch is currently available.

Technical ContextAI

Affects Cloudboost Virtual Appliance. Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.