CVE-2026-76113: Medium severity Dell Terraform Provider for Redfish vulnerability
Published Oct 14, 2026
·Updated
Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Affected Software
1 affected component
Dell Terraform Provider for Redfish>=1.1.0<=1.6.1
Event History
Oct 14, 2026
CVE Published
via MITRE·03:04 PM
Data Sourced
via MITRE·03:04 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 are affected. The vulnerable component is the redfish_certificate resource.
2
What level of access does an attacker need?
Exploitation requires remote access, high privileges, and user interaction. The reported impact is exposure of sensitive information.