Improper Certificate Validation in Dell Ansible Storage for Unity
CVE-2026-91890

8.7HIGH

Key Information:

Vendor

Dell
Status
Ansible Storage For Unity
Vendor
CVE Published:
11 November 2026

What is CVE-2026-91890?

Dell Ansible Storage for Unity versions prior to 1.2.13 are susceptible to an improper certificate validation issue in the UnityRESTConnector component. This vulnerability allows an unauthenticated attacker with remote access to potentially exploit the system, leading to unauthorized access and information exposure. It is crucial for users to upgrade to the latest version to mitigate the associated risks.

Affected Version(s)

Ansible Storage for Unity 0 < 1.2.13 or later

References

https://www.dell.com/support/kbdoc/en-au/000515361/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.