{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/terraform-provider-for-powerflex-1.5.0-1.8.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:terraform_provider_for_powerflex:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.9,"id":"CVE-2026-91880"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Terraform Provider for PowerFlex (1.5.0-1.8.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component. The provider uses ssh.InsecureIgnoreHostKey() as the default SSH host key callback. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could result in information exposure and unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers should monitor for vendor guidance regarding this vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-11T20:11:44Z","date_published":"2026-11-11T20:11:44Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-powerflex-ssh-cve-2026-91880/","summary":"The Dell Terraform Provider for PowerFlex versions 1.5.0 through 1.8.0 contains an Improper Certificate Validation vulnerability in the SSH client component that could lead to information exposure and unauthorized access.","title":"Dell Terraform Provider for PowerFlex: Improper SSH Certificate Validation (CVE-2026-91880)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-powerflex-ssh-cve-2026-91880/"}],"language":"en","title":"CraftedSignal Threat Feed - Terraform Provider for PowerFlex (1.5.0-1.8.0)","version":"https://jsonfeed.org/version/1.1"}