Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic…
Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Dell Technologies
- Product
- Terraform Provider for PowerFlex
- CVSS v3.1
- 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-326
- Exposure class
- Developer platform, Storage / NAS, OT / ICS
- NVD status
- Received
Why it ranks 20 (Routine)
- Product class: developer platform, storage / NAS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-91892 on this site · NVD · CVE.org · Vulnpedia