{"id":"CVE-2026-91875","aliases":[],"cve":{"records":[{"id":"CVE-2026-91875","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.433Z","published":"2026-11-11T18:19:18.379Z","modified":"2026-11-11T18:19:18.379Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-11T18:19:18.379Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-295","description":"CWE-295: Improper Certificate Validation","source":"dell"}],"applicability":[],"prioritization":[]},"title":"Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component.","titleSource":"dell","descriptionSource":"dell","description":"Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","score":8.7,"severity":"high","published":"2026-11-11T18:19:18.379Z","modified":"2026-11-11T18:19:18.379Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"OpenManage Ansible Modules","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"11.0.0 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91875"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-in/000515420/dsa-2026-432-security-update-for-dell-ansible-server-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91875","modified":"2026-11-11T18:19:18.379Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91875"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-11T18:51:05.733Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T20:05:35.243Z","attemptedAt":"2026-11-11T20:05:35.243Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-11T20:05:36.042Z","attemptedAt":"2026-11-11T20:05:36.042Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T20:05:36.957Z","attemptedAt":"2026-11-11T20:05:36.957Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T20:05:35.958Z","attemptedAt":"2026-11-11T20:05:35.958Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-91875","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91875","modified":"2026-11-11T19:17:47.513","score":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-11-11T20:05:35.243Z"},{"source":"ENISA EUVD","id":"EUVD-2026-123684","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123684","modified":"Nov 11, 2026, 6:19:18 PM","score":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","checkedAt":"2026-11-11T20:05:36.957Z"}],"aiSummary":{"text":"Dell OpenManage Ansible Modules versions 9.2.0 through 10.0.3 have an Improper Certificate Validation weakness. An unauthenticated attacker with remote access may exploit this, potentially leading to information exposure and unauthorized access.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T19:01:14.661Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91875"}]}}