Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91874)
Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 contain an improper certificate validation vulnerability in the iDRACConnection component that may lead to information exposure and unauthorized access.
CVE search metadata
CVE search record: CVE-2026-91874. Severity: high. CVSS: 8.7. KEV: no. Product: OpenManage Ansible Modules (5.0.0-10.0.3). Brief: Dell OpenManage Ansible Modules: Improper Certificate Validation (CVE-2026-91874). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91874/
Triage facts
Revision 1- Applicability
- OpenManage Ansible Modules (5.0.0-10.0.3)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:11 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Impact
Exploitation of this vulnerability may result in information exposure and unauthorized access to systems using the affected modules.
Recommendation
Users are advised to review vendor guidance regarding CVE-2026-91874 and monitor for updates to the Dell OpenManage Ansible Modules.