---
id: "CVE-2026-91890"
page: "https://infrastack.ai/live/CVE-2026-91890"
kind: "vulnerability"
aliases: ["CVE-2026-91890"]
title: "Dell Ansible Storage for Unity: certificate checks missing, enabling unauthorized access"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ansible", "dell", "storage", "unity", "vendor"]
not_affected_if: ["collection-not-used"]
published_at: "2026-11-11T18:19:53+00:00"
first_seen_at: "2026-11-11T18:28:44+00:00"
updated_at: "2026-11-11T18:29:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91890", "first_seen_at": "2026-11-11T18:28:44+00:00"}]
exploit_sources: []
---

# Dell Ansible Storage for Unity: certificate checks missing, enabling unauthorized access

Link for people: https://infrastack.ai/live/CVE-2026-91890 (this .md is for agents)

Dell Ansible Storage for Unity versions before 1.2.13 do not properly validate certificates in the UnityRESTConnector component. An unauthenticated remote attacker could potentially read information and gain unauthorized access.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Dell Ansible Storage for Unity collection version against `1.2.13`
- Look for the UnityRESTConnector component in the installed collection

## Fix

- Dell Ansible Storage for Unity: move to `1.2.13` or later

## Timeline

- 2026-11-11T18:28:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91890

## From the sources

Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in the UnityRESTConnector component. An unauthenticated attacker with remote access could potentially exploit this vulnerability,leading to information exposure and unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_