Dell OpenManage Ansible Modules: Improper Certificate Validation
Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component which may allow an unauthenticated remote attacker to cause information exposure and unauthorized access.
CVE search metadata
CVE search record: CVE-2026-91875. Severity: high. CVSS: 8.7. KEV: no. Product: OpenManage Ansible Modules (9.2.0-10.0.3). Brief: Dell OpenManage Ansible Modules: Improper Certificate Validation. Brief link: https://feed.craftedsignal.io/briefs/2026-11-dell-openmanage-cert-validation-cve-2026-91875/
Triage facts
Revision 1- Applicability
- OpenManage Ansible Modules (9.2.0-10.0.3)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:11 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Impact
Exploitation could lead to information exposure and unauthorized access to the environment.
Recommendation
Refer to official Dell security advisories regarding CVE-2026-91875 for remediation steps.