CVE-2026-91873 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, do not properly validate certificates in the iDRACRedfishAPI component. A remote unauthenticated attacker could potentially intercept management traffic, leading to information exposure and unauthorized access.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that use Dell OpenManage Ansible Modules to manage Dell iDRAC servers through the Redfish API are exposed within the affected version range. The sources do not say which deployment paths are most exposed, so treat any automation that talks to iDRAC over the network as in scope. Teams not using these modules can skip it.
Not affected if not-using-openmanage-modules
Who cares ansible, dell, idrac, openmanage, redfish
2.1.2 through 10.0.310.0.3 (the fixed version is not stated in the sources provided)Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.