CVE-2026-91873: High severity vulnerability
Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 are affected, specifically through the iDRACRedfishAPI component.
Does exploitation require credentials or user interaction?
No. The vulnerability can potentially be exploited by an unauthenticated attacker with remote access, and the supplied vector indicates no user interaction is required.
What is the potential impact?
Successful exploitation could lead to information exposure and unauthorized access. The provided severity vector indicates high confidentiality and integrity impact, with no availability impact.