Dell Ansible Storage for PowerStore: Improper Certificate Validation (CVE-2026-91871)
Dell Ansible Storage for PowerStore versions prior to 3.9.0 contain an improper certificate validation vulnerability in the API client component, which can be exploited by an unauthenticated remote attacker to gain unauthorized access and expose information.
CVE search metadata
CVE search record: CVE-2026-91871. Severity: high. CVSS: 7.4. KEV: no. Product: Ansible Storage for PowerStore (< 3.9.0). Brief: Dell Ansible Storage for PowerStore: Improper Certificate Validation (CVE-2026-91871). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-ansible-powerstore-cert-validation-cve-2026-91871/
Triage facts
Revision 1- Applicability
- Ansible Storage for PowerStore (< 3.9.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an improper certificate validation vulnerability in the API client component.
Impact
An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. This vulnerability has a CVSS v3.1 base score of 7.4.
Recommendation
Upgrade to the latest version to address this vulnerability.