Dell OpenManage Ansible Modules: Improper certificate validation in SessionAPI
Summary
Dell OpenManage Ansible Modules versions 9.2.0 through 10.0.3 contain an improper certificate validation flaw (CWE-295) in the SessionAPI component. A remote, unauthenticated attacker may be able to exploit it to obtain information and gain unauthorized access, but the attack complexity is high. The CNA rates it CVSS 8.7 (High), while VulDB rates it 3.7, so the exact impact and attack path remain unclear.
Affected
- Dell OpenManage Ansible Modules 9.2.0 through 10.0.3 (CVE record)
- CVE record lists the product as affected from 0 before 11.0.0
Fixed in
- Version 11.0.0 or later (per aggregator data, not yet verified against Dell advisory DSA-2026-432)
Workaround
- Vendor mitigation text: Unknown.
- Interim measures, not verified as fixes for this flaw: restrict network access from playbook hosts to iDRAC and OpenManage management interfaces; keep TLS certificate validation enabled in playbooks and use custom CA certificates where needed.
Exploitation
- No evidence of exploitation in the wild found.
- No public proof of concept found.
- One aggregator classifies it as not known to be exploited.
- VulDB estimates an exploit price of USD 5,000 to 25,000; this is a market estimate, not evidence of use.
Our recommendation
- Inventory all hosts, CI systems and jump hosts running OpenManage Ansible Modules and record their versions.
- Plan an upgrade to 11.0.0 or later after confirming the fixed version in DSA-2026-432.
- Until the upgrade, limit which hosts can reach iDRAC and OpenManage, especially from user or internet segments.
- Review certificate validation settings in playbooks.
- Re-check for exploitation signals such as KEV listing or public PoCs in the coming weeks.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CVE Record CVE-2026-91875 www.cve.org
- Dell DSA-2026-432 Security Update www.dell.com
- VulDB entry 435927 vuldb.com
- Dell OpenManage Ansible Modules product page www.dell.com
- OffSeq Radar CVE-2026-91875 radar.offseq.com
- OpenManage Ansible Modules CHANGELOG github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 20:24.
Original description (NVD)
Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.