---
id: "CVE-2026-91873"
page: "https://infrastack.ai/live/CVE-2026-91873"
kind: "vulnerability"
aliases: ["CVE-2026-91873"]
title: "Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC access"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ansible", "dell", "idrac", "infrastructure", "openmanage", "redfish"]
not_affected_if: ["not-using-openmanage-modules"]
published_at: "2026-11-11T19:17:47+00:00"
first_seen_at: "2026-11-11T19:28:48+00:00"
updated_at: "2026-11-11T19:29:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91873", "first_seen_at": "2026-11-11T19:28:48+00:00"}]
exploit_sources: []
---

# Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC access

Link for people: https://infrastack.ai/live/CVE-2026-91873 (this .md is for agents)

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, do not properly validate certificates in the iDRACRedfishAPI component. A remote unauthenticated attacker could potentially intercept management traffic, leading to information exposure and unauthorized access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the Dell OpenManage Ansible Modules collection (dellemc.openmanage) against the range `2.1.2` through `10.0.3`
- Look for playbooks or tasks that use the iDRAC Redfish modules

## Fix

- Move to a version above `10.0.3` (the fixed version is not stated in the sources provided)

## Timeline

- 2026-11-11T19:28:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91873

## From the sources

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_