CVE record · 1 source
CVE-2026-91880
CVSS 8.9Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client…
- Vendor
- Dell Technologies
- Product
- Terraform Provider for PowerFlex
- CVSS v3.1
- 8.9 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
- Weakness
- CWE-295
- Exposure class
- Developer platform, Storage / NAS, OT / ICS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client…
Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey() as the…