---
id: "CVE-2026-91874"
page: "https://infrastack.ai/live/CVE-2026-91874"
kind: "vulnerability"
aliases: ["CVE-2026-91874"]
title: "Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC connections"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ansible", "dell-openmanage", "dell-servers", "idrac", "infrastructure"]
not_affected_if: ["version-outside-5.0.0-to-10.0.3"]
published_at: "2026-11-11T19:17:47+00:00"
first_seen_at: "2026-11-11T19:28:48+00:00"
updated_at: "2026-11-11T19:29:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91874", "first_seen_at": "2026-11-11T19:28:48+00:00"}]
exploit_sources: []
---

# Dell OpenManage Ansible Modules: certificate checks skipped, exposing iDRAC connections

Link for people: https://infrastack.ai/live/CVE-2026-91874 (this .md is for agents)

Dell OpenManage Ansible Modules versions 5.0.0 through 10.0.3 do not properly validate certificates in the iDRACConnection component. An unauthenticated remote attacker could potentially impersonate the iDRAC server and gain information exposure and unauthorized access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed collection version, for example with `ansible-galaxy collection list dellemc.openmanage`
- Confirm whether playbooks use the iDRACConnection module for remote iDRAC management

## Fix

- Dell OpenManage Ansible Modules: move to a version later than `10.0.3`; the exact fixed version is unknown from the sources

## Timeline

- 2026-11-11T19:28:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91874

## From the sources

Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_