HIGHCVSS v3.1 8.9Vulnerability
CVE-2026-91880
Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey() as the default SSH host key callback. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.9
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 8.9
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-91880
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
- First seen by Signal
- 2026-11-11T19:44:24+00:00
- Name
- CVE-2026-91880
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
- Published at
- 2026-11-11T19:17:48.063
- Last modified
- 2026-11-11T19:17:48.063
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph