---
id: "CVE-2026-91892"
page: "https://infrastack.ai/live/CVE-2026-91892"
kind: "vulnerability"
aliases: ["CVE-2026-91892"]
title: "Dell Terraform Provider for PowerFlex: deprecated crypto may expose traffic"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["dell-powerflex", "terraform", "vendor"]
not_affected_if: []
published_at: "2026-11-11T19:17:48+00:00"
first_seen_at: "2026-11-11T19:28:50+00:00"
updated_at: "2026-11-11T19:30:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91892", "first_seen_at": "2026-11-11T19:28:50+00:00"}]
exploit_sources: []
---

# Dell Terraform Provider for PowerFlex: deprecated crypto may expose traffic

Link for people: https://infrastack.ai/live/CVE-2026-91892 (this .md is for agents)

Dell Terraform Provider for PowerFlex versions before 1.9.0 may allow deprecated cryptographic protocols during secure communications. An unauthenticated remote attacker could potentially exploit this to expose information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Dell Terraform Provider for PowerFlex version in your Terraform configuration or lock file.

## Timeline

- 2026-11-11T19:28:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91892

## From the sources

Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability  that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_