CVE-2026-91892

Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91880

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey as the default SSH host key callback. An unauthenticated attacker with remote acce...

CVE-2026-91870

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access...

CVE-2026-68862

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

CVE-2026-91892

The Dell Terraform Provider for PowerFlex (versions prior to 1.9.0 ) contains a vulnerability related to inadequate encryption strength (CWE-326 ). The software may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access co...

EUVD-2026-123666

Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91892

Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

EUVD-2026-123662

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey as the default SSH host key callback. An unauthenticated attacker with remote acce...

CVE-2026-91880

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey as the default SSH host key callback. An unauthenticated attacker with remote acce...

CVE-2026-91880

The Dell Terraform Provider for PowerFlex (versions 1.5.0 through 1.8.0) contains an Improper Certificate Validation vulnerability within its SSH client component. The root cause is the use of ssh.InsecureIgnoreHostKey() as the default SSH host key callback, which fails to properly validate host ...

CVE-2026-68862

The Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection vulnerability in the SDC host provisioning component . A high-privileged remote attacker with access to the PowerFlex management plane could exploit this flaw to execute arbitrary OS commands on provisioned SDC hosts,...

CVE-2026-68862

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

EUVD-2026-123660

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

CVE-2026-91870

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0 , is affected by an Improper Certificate Validation vulnerability in the API client component . An unauthenticated attacker with remote access could exploit this flaw to cause information exposure and achieve unauthorized access . The vu...

EUVD-2026-123634

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access...

CVE-2026-91870

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access...

CVE-2026-68862: Dell Terraform Provider for Dell PowerFlex: Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host…

Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS...

PT-2026-145312

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access...

PT-2026-145414

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey as the default SSH host key callback. An unauthenticated attacker with remote acce...

CVE-2026-91870: Dell Ansible Storage for PowerFlex: Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability…

Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability in the API client component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access...