Dell Terraform Provider For Redfish vulnerabilities

2 CVEs affecting Dell Terraform Provider For Redfish, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-91881, published 2026-10-14.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-91881, published 2026-10-14. Critical severity, CVSS 9.0. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access…
• CVE-2026-76113, published 2026-10-14. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component.…