Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Dell Terraform Provider for Redfish — dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-securit… Clear all filters
TI-2026-74053 CVE-2026-91881 · GHSA-wpr3-vhw9-4w82

Certificate validation flaw in Dell Terraform Provider for Redfish

Priority MEDIUM 40

Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00231 Published 2026-10-14 Fixed in 1.6.2 or later CWE-295
TI-2026-74031 CVE-2026-76113 · GHSA-q86g-x648-4r76

Information exposure in Dell Terraform Provider for Redfish

Priority LOW 19

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component.

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00163 Published 2026-10-14 Fixed in 1.6.2 or later CWE-532