Cpe:2.3:a:dell:terraform_provider_for_powerflex:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3adellterraform_provider_for_powerflex/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 20:11:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgDell Terraform Provider for PowerFlex: Improper SSH Certificate Validation (CVE-2026-91880)https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-powerflex-ssh-cve-2026-91880/Wed, 11 Nov 2026 20:11:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-dell-terraform-powerflex-ssh-cve-2026-91880/The Dell Terraform Provider for PowerFlex versions 1.5.0 through 1.8.0 contains an Improper Certificate Validation vulnerability in the SSH client component that could lead to information exposure and unauthorized access.Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component. The provider uses ssh.InsecureIgnoreHostKey() as the default SSH host key callback. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

Impact

Successful exploitation could result in information exposure and unauthorized access.

Recommendation

Users should monitor for vendor guidance regarding this vulnerability.

]]>highadvisory