High severity8.9NVD Advisory· Published Nov 11, 2026
CVE-2026-91880
CVE-2026-91880
Description
Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey() as the default SSH host key callback. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=1.5.0,<1.8.0+ 1 more
- (no CPE)range: >=1.5.0,<1.8.0
- (no CPE)range: 1.5.0 - 1.8.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.