{"id":"CVE-2026-91874","kind":"vulnerability","aliases":["CVE-2026-91874"],"related":[],"title":"Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC connections","description":"Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.","summary":"Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 do not properly validate certificates in the iDRACConnection component. An unauthenticated remote attacker could potentially impersonate the iDRAC server and gain information exposure and unauthorized access.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ansible","dell-openmanage","dell-servers","idrac","infrastructure"],"not_affected_if":["version-outside-5.0.0-to-10.0.3"],"how_to_check":"- Check the installed collection version, for example with `ansible-galaxy collection list dellemc.openmanage`\n- Confirm whether playbooks use the iDRACConnection module for remote iDRAC management","fix":"- Dell OpenManage Ansible Modules: move to a version later than `10.0.3`; the exact fixed version is unknown from the sources","status":"open","published_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:48+00:00","triaged_at":"2026-11-11T19:29:47+00:00","updated_at":"2026-11-11T19:29:47+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-11T19:29:47Z","model":"claude-haiku-5-5","output":{"fix":"- Dell OpenManage Ansible Modules: move to a version later than `10.0.3`; the exact fixed version is unknown from the sources","reach":"network","title":"Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC connections","impact":"high","summary":"Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 do not properly validate certificates in the iDRACConnection component. An unauthenticated remote attacker could potentially impersonate the iDRAC server and gain information exposure and unauthorized access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-openmanage","ansible","idrac","dell-servers"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker impersonates iDRAC endpoint and gains unauthorized access","analyst_note":"Find the fixed version and vendor advisory for CVE-2026-91874 in the Dell security advisories; sources only give the affected range.","how_to_check":"- Check the installed collection version, for example with `ansible-galaxy collection list dellemc.openmanage`\n- Confirm whether playbooks use the iDRACConnection module for remote iDRAC management\n- unknown for further checks, as the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-5.0.0-to-10.0.3"],"who_is_affected":"Teams that use Dell OpenManage Ansible Modules within the affected range to manage Dell servers through iDRAC are exposed. Sources do not say which exact configurations are required, so teams running only other automation tools or versions outside 5.0.0 to 10.0.3 can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000789,"input_tokens":4567,"output_tokens":664,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-91874':13A,16A '10.0.3':33B,67C '5.0.0':31B,65C 'access':59B,83C,95C 'ansibl':3A,17B,28B,62C 'attack':46B,80C 'certif':5A,38B,71C 'check':6A 'compon':42B,77C 'connect':10A 'contain':68C 'could':47B,84C 'cve':11A,14A 'dell':1A,19B,22B,26B,60C 'dell-openmanag':18B 'dell-serv':21B 'exploit':86C 'expos':8A 'exposur':56B,92C 'gain':54B 'idrac':9A,24B,51B 'idracconnect':41B,76C 'imperson':49B 'improp':70C 'inform':55B,91C 'infrastructur':25B 'lead':89C 'modul':4A,29B,63C 'openmanag':2A,20B,27B,61C 'potenti':48B,85C 'proper':36B 'remot':45B,82C 'server':23B,52B 'skip':7A 'unauthent':44B,79C 'unauthor':58B,94C 'valid':37B,72C 'version':30B,64C 'vulner':73C,88C","nicknames":[],"mitigations":[],"who_affected":"Teams that use Dell OpenManage Ansible Modules within the affected range to manage Dell servers through iDRAC are exposed. Sources do not say which exact configurations are required, so teams running only other automation tools or versions outside 5.0.0 to 10.0.3 can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ansible","dellopenmanage","dellservers","high","idrac","infrastructure"],"campaign_type":null,"search_a":"'-2026':12A,15A '-91874':13A,16A 'ansibl':3A 'certif':5A 'check':6A 'connect':10A 'cve':11A,14A 'dell':1A 'expos':8A 'idrac':9A 'modul':4A 'openmanag':2A 'skip':7A","search_b":"'10.0.3':33B '5.0.0':31B 'access':59B 'ansibl':17B,28B 'attack':46B 'certif':38B 'compon':42B 'could':47B 'dell':19B,22B,26B 'dell-openmanag':18B 'dell-serv':21B 'exposur':56B 'gain':54B 'idrac':24B,51B 'idracconnect':41B 'imperson':49B 'inform':55B 'infrastructur':25B 'modul':29B 'openmanag':20B,27B 'potenti':48B 'proper':36B 'remot':45B 'server':23B,52B 'unauthent':44B 'unauthor':58B 'valid':37B 'version':30B","search_c":"'10.0.3':67C '5.0.0':65C 'access':83C,95C 'ansibl':62C 'attack':80C 'certif':71C 'compon':77C 'contain':68C 'could':84C 'dell':60C 'exploit':86C 'exposur':92C 'idracconnect':76C 'improp':70C 'inform':91C 'lead':89C 'modul':63C 'openmanag':61C 'potenti':85C 'remot':82C 'unauthent':79C 'unauthor':94C 'valid':72C 'version':64C 'vulner':73C,88C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T19:17:47+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91874","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91874","severity":null,"published_at":"2026-11-11T19:17:47+00:00","modified_at":"2026-11-11T19:17:47+00:00","first_seen_at":"2026-11-11T19:28:48+00:00","fetched_at":"2026-11-11T19:28:48+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}