Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91873)
Dell OpenManage Ansible Modules versions 2.1.2 through 10.0.3 are vulnerable to improper certificate validation in the iDRACRedfishAPI component, potentially leading to information exposure and unauthorized access.
CVE search metadata
CVE search record: CVE-2026-91873. Severity: high. CVSS: 8.7. KEV: no. Product: OpenManage Ansible Modules (2.1.2-10.0.3). Brief: Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91873). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-ansible-cert-validation-cve-2026-91873/
Triage facts
Revision 1- Applicability
- OpenManage Ansible Modules (2.1.2-10.0.3)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:10 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contain an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. The CVSS base score is 8.7.