Improper Certificate Validation in Dell Ansible Storage API Client
CVE-2026-91871

7.4HIGH

Key Information:

Vendor

Dell
Status
Ansible Storage For Powerstore
Vendor
CVE Published:
11 November 2026

What is CVE-2026-91871?

Dell Ansible Storage for PowerStore features an improper certificate validation vulnerability in its API client. This flaw allows unauthenticated attackers with remote access to exploit the vulnerability, potentially leading to the exposure of sensitive information and enabling unauthorized access to the system.

Affected Version(s)

Ansible Storage for PowerStore 0 < 3.9.0 or later

References

https://www.dell.com/support/kbdoc/en-au/000515361/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.