CVE-2026-91874: High severity vulnerability
Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 are affected, specifically through the iDRACConnection component.
Does exploitation require credentials or user interaction?
No. The vulnerability can potentially be exploited by an unauthenticated attacker with remote access, and the provided vector indicates no user interaction is required.
What could a successful attack allow?
Successful exploitation could lead to information exposure and unauthorized access. The provided impact data indicates high confidentiality and integrity impact, with no availability impact listed.
What makes exploitation more difficult?
The supplied vector rates attack complexity as high, indicating exploitation requires conditions beyond simply reaching the affected component remotely.