CVE-2026-91880 – Dell Terraform Provider for PowerFlex Improper Certificate Validation Vulnerability

​CVE ID :CVE-2026-91880

Published : Nov. 11, 2026, 7:17 p.m. | 1 hour, 20 minutes ago

Description :Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey() as the default SSH host key callback. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.

Severity: 8.9 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More