{"id":"CVE-2026-91874","aliases":[],"cve":{"records":[{"id":"CVE-2026-91874","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.433Z","published":"2026-11-11T18:15:36.584Z","modified":"2026-11-12T19:40:37.404Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-11T18:15:36.584Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-12T19:40:37.404Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-295","description":"CWE-295: Improper Certificate Validation","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-12T19:40:27.438177Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component.","titleSource":"dell","descriptionSource":"dell","description":"Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","score":8.7,"severity":"high","published":"2026-11-11T18:15:36.584Z","modified":"2026-11-12T19:40:37.404Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"OpenManage Ansible Modules","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"11.0.0 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91874"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91874","modified":"2026-11-12T19:40:37.404Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91874"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-13T05:03:19.368Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:55:30.737Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T20:10:33.930Z","attemptedAt":"2026-11-11T20:10:33.930Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-11T20:10:33.489Z","attemptedAt":"2026-11-11T20:10:33.489Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T20:10:33.618Z","attemptedAt":"2026-11-11T20:10:33.618Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T20:10:33.570Z","attemptedAt":"2026-11-11T20:10:33.570Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-123680","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123680","modified":"Nov 11, 2026, 6:15:36 PM","score":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-11-11T20:10:33.618Z"},{"source":"NVD","id":"CVE-2026-91874","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91874","modified":"2026-11-11T19:17:47.373","score":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-11-11T20:10:33.930Z"}],"aiSummary":{"text":"Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 have an Improper Certificate Validation weakness. An unauthenticated attacker with remote access could exploit this, potentially leading to information exposure and unauthorized access. The iDRACConnection component is affected.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T19:06:05.986Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91874"}]}}