CVE-2026-91875: High severity vulnerability
Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Event History
Frequently Asked Questions
Which deployments are affected?
Dell OpenManage Ansible Modules versions 9.2.0 through 10.0.3 are affected, specifically the SessionAPI component.
Does exploitation require credentials or user interaction?
No. The vulnerability can potentially be exploited by an unauthenticated attacker with remote access, and the supplied vector indicates no user interaction is required.
What could an attacker achieve?
Successful exploitation could lead to information exposure and unauthorized access. The provided impact vector indicates high confidentiality and integrity impact, with no availability impact stated.