Dell Ansible Storage for Unity: Improper Certificate Validation (CVE-2026-91890)
Dell Ansible Storage for Unity versions prior to 1.2.13 contain an improper certificate validation flaw in the UnityRESTConnector component, which may allow an unauthenticated remote attacker to gain unauthorized access.
CVE search metadata
CVE search record: CVE-2026-91890. Severity: high. CVSS: 8.7. KEV: no. Product: Ansible Storage for Unity (< 1.2.13). Brief: Dell Ansible Storage for Unity: Improper Certificate Validation (CVE-2026-91890). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-ansible-unity-cert-cve-2026-91890/
Triage facts
Revision 1- Applicability
- Ansible Storage for Unity (< 1.2.13)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell Ansible Storage for Unity, versions prior to 1.2.13, contains an improper certificate validation vulnerability in the UnityRESTConnector component.
Impact
An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Recommendation
Upgrade to a non-vulnerable version.