CVE-2026-91871: High severity vulnerability
Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Ansible Storage for PowerStoreto a version that resolves this vulnerability.Fixed in 3.9.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Ansible Storage for PowerStore versions earlier than 3.9.0 are affected. The issue is in the API client component.
What does an attacker need to exploit this issue?
An attacker must have remote access to the affected API client. No authentication or user interaction is required, but exploitation has high attack complexity.
What is the recommended remediation?
Update Dell Ansible Storage for PowerStore to version 3.9.0 or later.
What is the impact of successful exploitation?
Successful exploitation could result in information exposure and unauthorized access. The provided severity vector indicates confidentiality and integrity impacts, with no availability impact.