CVE-2026-91870: High severity vulnerability
Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Ansible Storage for PowerFlexto a version that resolves this vulnerability.Fixed in 3.2.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Ansible Storage for PowerFlex versions earlier than 3.2.0 are affected. The vulnerable component is the API client.
What does an attacker need to exploit this issue?
An attacker must have remote access to the affected deployment. No authentication or user interaction is required, although exploitation has high attack complexity.
What is the recommended remediation?
Update Dell Ansible Storage for PowerFlex to version 3.2.0 or later. The provided data does not describe a workaround for environments that cannot be updated immediately.