{"id":"CVE-2026-91873","kind":"vulnerability","aliases":["CVE-2026-91873"],"related":[],"title":"Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC access","description":"Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","summary":"Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, do not properly validate certificates in the iDRACRedfishAPI component. A remote unauthenticated attacker could potentially intercept management traffic, leading to information exposure and unauthorized access.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ansible","dell","idrac","infrastructure","openmanage","redfish"],"not_affected_if":["not-using-openmanage-modules"],"how_to_check":"- Check the installed version of the Dell OpenManage Ansible Modules collection (dellemc.openmanage) against the range `2.1.2` through `10.0.3`\n- Look for playbooks or tasks that use the iDRAC Redfish modules","fix":"- Move to a version above `10.0.3` (the fixed version is not stated in the sources provided)","status":"open","published_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:48+00:00","triaged_at":"2026-11-11T19:29:48+00:00","updated_at":"2026-11-11T19:29:48+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-11T19:29:48Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version above `10.0.3` (the fixed version is not stated in the sources provided)","reach":"network","title":"Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC access","impact":"high","summary":"Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, do not properly validate certificates in the iDRACRedfishAPI component. A remote unauthenticated attacker could potentially intercept management traffic, leading to information exposure and unauthorized access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","openmanage","ansible","idrac","redfish"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker reads management traffic and reaches iDRAC without credentials","analyst_note":"Confirm the fixed version and any vendor advisory for CVE-2026-91873 from Dell's security advisories; sources only give the affected range.","how_to_check":"- Check the installed version of the Dell OpenManage Ansible Modules collection (dellemc.openmanage) against the range `2.1.2` through `10.0.3`\n- Look for playbooks or tasks that use the iDRAC Redfish modules\nunknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-using-openmanage-modules"],"who_is_affected":"Teams that use Dell OpenManage Ansible Modules to manage Dell iDRAC servers through the Redfish API are exposed within the affected version range. The sources do not say which deployment paths are most exposed, so treat any automation that talks to iDRAC over the network as in scope. Teams not using these modules can skip it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000786,"input_tokens":4571,"output_tokens":657,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-91873':13A,16A '10.0.3':30B,63C '2.1.2':28B,61C 'access':10A,55B,79C,91C 'ansibl':3A,17B,25B,58C 'attack':43B,76C 'certif':5A,35B,67C 'check':6A 'compon':39B,73C 'contain':64C 'could':44B,80C 'cve':11A,14A 'dell':1A,18B,23B,56C 'exploit':82C 'expos':8A 'exposur':52B,88C 'idrac':9A,19B 'idracredfishapi':38B,72C 'improp':66C 'inform':51B,87C 'infrastructur':20B 'intercept':46B 'lead':49B,85C 'manag':47B 'modul':4A,26B,59C 'openmanag':2A,21B,24B,57C 'potenti':45B,81C 'proper':33B 'redfish':22B 'remot':41B,78C 'skip':7A 'traffic':48B 'unauthent':42B,75C 'unauthor':54B,90C 'valid':34B,68C 'version':27B,60C 'vulner':69C,84C","nicknames":[],"mitigations":[],"who_affected":"Teams that use Dell OpenManage Ansible Modules to manage Dell iDRAC servers through the Redfish API are exposed within the affected version range. The sources do not say which deployment paths are most exposed, so treat any automation that talks to iDRAC over the network as in scope. Teams not using these modules can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ansible","dell","high","idrac","infrastructure","openmanage","redfish"],"campaign_type":null,"search_a":"'-2026':12A,15A '-91873':13A,16A 'access':10A 'ansibl':3A 'certif':5A 'check':6A 'cve':11A,14A 'dell':1A 'expos':8A 'idrac':9A 'modul':4A 'openmanag':2A 'skip':7A","search_b":"'10.0.3':30B '2.1.2':28B 'access':55B 'ansibl':17B,25B 'attack':43B 'certif':35B 'compon':39B 'could':44B 'dell':18B,23B 'exposur':52B 'idrac':19B 'idracredfishapi':38B 'inform':51B 'infrastructur':20B 'intercept':46B 'lead':49B 'manag':47B 'modul':26B 'openmanag':21B,24B 'potenti':45B 'proper':33B 'redfish':22B 'remot':41B 'traffic':48B 'unauthent':42B 'unauthor':54B 'valid':34B 'version':27B","search_c":"'10.0.3':63C '2.1.2':61C 'access':79C,91C 'ansibl':58C 'attack':76C 'certif':67C 'compon':73C 'contain':64C 'could':80C 'dell':56C 'exploit':82C 'exposur':88C 'idracredfishapi':72C 'improp':66C 'inform':87C 'lead':85C 'modul':59C 'openmanag':57C 'potenti':81C 'remot':78C 'unauthent':75C 'unauthor':90C 'valid':68C 'version':60C 'vulner':69C,84C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T19:17:47+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91873","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91873","severity":null,"published_at":"2026-11-11T19:17:47+00:00","modified_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:48+00:00","fetched_at":"2026-11-11T19:28:48+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}