{"id":"CVE-2026-91879","aliases":[],"cve":{"records":[{"id":"CVE-2026-91879","source":"dell","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T10:04:43.433Z","published":"2026-11-11T17:57:30.836Z","modified":"2026-11-14T04:57:43.690Z"}],"publishers":[{"name":"dell","role":"CNA","organizationId":"c550e75a-17ff-4988-97f0-544cde3820fe","modified":"2026-11-11T17:57:30.836Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-14T04:57:43.690Z"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilities","tags":["vendor-advisory"],"source":"dell"}],"weaknesses":[{"id":"CWE-532","description":"CWE-532: Insertion of Sensitive Information into Log File","source":"dell"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains an insertion of…","titleSource":"dell","descriptionSource":"dell","description":"Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains an insertion of sensitive information into Log File vulnerability in the client initialization component.  A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","score":8.8,"severity":"high","published":"2026-11-11T17:57:30.836Z","modified":"2026-11-14T04:57:43.690Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Dell","name":"Terraform Provider for ObjectScale","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.1.1 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91879"},{"vendor":"Dell","name":"Terraform Provider for PowerStore","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.3.1 or later","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"dell","url":"https://www.cve.org/CVERecord?id=CVE-2026-91879"}],"remediation":[],"references":["https://www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilities"],"sources":[{"name":"CVE","id":"CVE-2026-91879","modified":"2026-11-14T04:57:43.690Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91879"}],"assessments":[{"source":"dell","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8}],"sourceAffected":[],"observedAt":"2026-11-14T05:04:17.381Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:10:30.655Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T18:20:33.380Z","attemptedAt":"2026-11-11T18:20:33.380Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-11T18:20:33.341Z","attemptedAt":"2026-11-11T18:20:33.341Z"},{"source":"EUVD","status":"refresh-failed","attemptedAt":"2026-11-11T18:20:32.587Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T18:20:33.341Z","attemptedAt":"2026-11-11T18:20:33.341Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-91879","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91879","modified":"2026-11-11T18:19:53.483","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T18:20:33.380Z"}],"aiSummary":{"text":"Dell Terraform for ObjectScale (before 1.1.1) and Powerstore (1.2.1 through 1.3.0) has a sensitive information insertion into log files vulnerability. A low-privileged attacker with remote access could exploit this, potentially leading to information exposure.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T18:21:03.433Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91879"}]}}