CVE-2026-76113

MediumCVSS 4.3

Published: 14/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Risk Assessment

A high privileged remote attacker could access sensitive information, potentially leading to data leakage.

Recommendation

Upgrade Dell Terraform Provider for Redfish to a version later than 1.6.1 and restrict access to the redfish_certificate resource.

Other vulnerabilities in Dell Terraform Provider for Redfish

CVE-2026-91881Critical
Dell Terraform Provider for Redfish before version 1.6.2 contains an Improper Certificate Validation vulnerability in the HTTP transport component, allowing an unauthenticated attacker to intercept all Redfish BMC traffic including credentials via man-in-the-middle attack.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS