CVE-2026-22285 - Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability

Back Back to CVE browser

MEDIUM

Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability

Published Mar 4, 2026

4.4

MEDIUM

CVSS 3.1

EPSS 0.11%

Description

Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access.

Affected products

Vendor Dell Product Device Management Agent (DDMA) Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <26.02

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Device Management Agent (DDMA)

unaffected

Version	Status	Constraints
-	affected	<26.02

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-256

References (1)

https://www.dell.com/support/kbdoc/en-us/000429177/dsa-2026-105
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/en-us/000429177/dsa-2026-105		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Mar 4, 2026

Updated Mar 4, 2026

Reserved Jan 7, 2026

Link CVE-2026-22285

CISA Vulnrichment

Updated Mar 4, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-22285

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-22285