{"id":"CVE-2026-91873","aliases":[],"cve":{"records":[{"id":"CVE-2026-91873","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.433Z","published":"2026-11-11T18:33:07.957Z","modified":"2026-11-13T17:34:51.057Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-11T18:33:07.957Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T17:34:51.057Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-295","description":"CWE-295: Improper Certificate Validation","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T17:34:26.653384Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component.","titleSource":"dell","descriptionSource":"dell","description":"Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","score":8.7,"severity":"high","published":"2026-11-11T18:33:07.957Z","modified":"2026-11-13T17:34:51.057Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"OpenManage Ansible Modules","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"11.0.0 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91873"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91873","modified":"2026-11-13T17:34:51.057Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91873"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-14T02:37:50.944Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:10:34.932Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-11T18:55:34.937Z","attemptedAt":"2026-11-11T18:55:34.937Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-11T18:55:34.985Z","attemptedAt":"2026-11-11T18:55:34.985Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-11T18:55:35.370Z","attemptedAt":"2026-11-11T18:55:35.370Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T18:55:34.988Z","attemptedAt":"2026-11-11T18:55:34.988Z"}],"evidence":[],"aiSummary":{"text":"Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 have an Improper Certificate Validation weakness in the iDRACRedfishAPI component, potentially allowing an unauthenticated attacker with remote access to expose information and gain unauthorized access. The vulnerability affects versions before 11.0.0.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T19:01:07.350Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91873"}]}}