Dell Ansible Storage for PowerFlex: Improper Certificate Validation (CVE-2026-91870)
Dell Ansible Storage for PowerFlex versions prior to 3.2.0 contain an improper certificate validation vulnerability in the API client component that could allow an unauthenticated remote attacker to gain unauthorized access and cause information exposure.
CVE search metadata
CVE search record: CVE-2026-91870. Severity: high. CVSS: 7.4. KEV: no. Product: Ansible Storage for PowerFlex (< 3.2.0). Brief: Dell Ansible Storage for PowerFlex: Improper Certificate Validation (CVE-2026-91870). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-ansible-storage-cert-val-cve-2026-91870/
Triage facts
Revision 1- Applicability
- Ansible Storage for PowerFlex (< 3.2.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell Ansible Storage for PowerFlex versions prior to 3.2.0 contain an improper certificate validation vulnerability in the API client component.
Impact
An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Recommendation
Upgrade to the vendor-provided patched version.