CVE-2026-91890: High severity vulnerability

Published Nov 11, 2026

Updated

Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the UnityRESTConnector component. An unauthenticated attacker with remote access could potentially exploit this vulnerability,leading to information exposure and unauthorized access.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Dell Ansible Storage for Unity to a version that resolves this vulnerability.
Fixed in 1.2.13

Event History

Nov 11, 2026

CVE Published

via MITRE·05:47 PM

Data Sourced

via MITRE·05:47 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Dell Ansible Storage for Unity versions earlier than 1.2.13 are affected. The issue is in the UnityRESTConnector component.

Does exploitation require credentials or user interaction?

No. The vulnerability can potentially be exploited by an unauthenticated attacker with remote access, and the supplied vector indicates no user interaction is required.

What is the impact if exploitation succeeds?

Successful exploitation could lead to information exposure and unauthorized access. The supplied vector indicates high confidentiality and integrity impact, with no availability impact.

CVE-2026-91890: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require credentials or user interaction?

What is the impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require credentials or user interaction?

What is the impact if exploitation succeeds?