Improper Certificate Validation Found in Dell Ansible Storage for PowerFlex
CVE-2026-91870

7.4HIGH

Key Information:

Vendor

Dell
Status
Ansible Storage For Powerflex
Vendor
CVE Published:
11 November 2026

What is CVE-2026-91870?

Dell Ansible Storage for PowerFlex versions before 3.2.0 contains an improper certificate validation weakness within its API client. This vulnerability can be exploited by an unauthenticated attacker with remote access, potentially resulting in unauthorized access and exposure of sensitive information. Organizations using affected versions should prioritize upgrading to mitigate risks associated with this flaw.

Affected Version(s)

Ansible Storage for PowerFlex 0 < 3.2.0 or later

References

https://www.dell.com/support/kbdoc/en-au/000515361/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.