{"metadata": {"vulnerability": "cve-2026-91881", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-15T10:04:43.434Z", "date_only": false, "value": "2026-09-15T10:04:43.434Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-91881", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-30T06:30:00Z", "date_only": false, "value": "2026-09-30T06:30:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "cve-2026-91881", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-01T02:32:50.877Z", "date_only": false, "value": "2026-10-01T02:32:50.877182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwrsxq5bxs2m", "record": "CVE-2026-91881", "field": "creation_timestamp", "uuid": "582e8aad-c0c6-4cf5-9b88-fe12a3f0030f", "content": "Dell patched critical Dell Terraform Provider vulnerabilities. CVE-2026-91881 exposes BMC traffic to attackers. Upgrade your providers to stay safe.\n\n#Dell #Terraform #CVE202691881 #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mwrsxq5bxs2m"}, {"timestamp": "2026-10-14T15:10:10.964Z", "date_only": false, "value": "2026-10-14T15:10:10.964Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-91881", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T15:10:10.964Z", "date_only": false, "value": "2026-10-14T15:10:10.964Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / dell", "record": "cve-2026-91881", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:17:56Z", "date_only": false, "value": "2026-10-14T16:17:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WPR3-VHW9-4W82", "record": "GHSA-WPR3-VHW9-4W82", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T16:17:56.767Z", "date_only": false, "value": "2026-10-14T16:17:56.767", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91881", "record": "FKIE_CVE-2026-91881", "field": "published"}, {"timestamp": "2026-10-14T16:20:04.669Z", "date_only": false, "value": "2026-10-14T16:20:04.669734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtxavgzd32l", "record": "CVE-2026-91881", "field": "creation_timestamp", "uuid": "4867bf25-51aa-4525-aa30-7934120692dd", "content": "CVE-2026-91881 - terraform provider for redfish\nVersions of the Dell Terraform Provider for Redfish before 1.6.2 do not properly check security certificates when communicating over the network. This means a remote\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dell #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtxavgzd32l"}, {"timestamp": "2026-10-14T18:32:20Z", "date_only": false, "value": "2026-10-14T18:32:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WPR3-VHW9-4W82", "record": "GHSA-WPR3-VHW9-4W82", "field": "published"}, {"timestamp": "2026-10-14T18:32:20Z", "date_only": false, "value": "2026-10-14T18:32:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WPR3-VHW9-4W82", "record": "GHSA-WPR3-VHW9-4W82", "field": "modified"}, {"timestamp": "2026-10-14T20:46:08.414Z", "date_only": false, "value": "2026-10-14T20:46:08.414309Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441217601457541", "record": "CVE-2026-91881", "field": "creation_timestamp", "uuid": "b89aa8bd-3ca8-4554-8e46-d9ec7091746d", "content": "CVE-2026-91881  Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. This is a Critical severity vulnerability as it allows an unauthenticated attacker to intercept all Redfish BMC traffic including credentials by performing a man-in-the-middle attack, since TLS certificate verification is unconditionally disabled in the base HTTP transport. Dell recommends customers to upgrade at the earliest opportunity.\nhttps://www.cve.org/CVERecord?id=CVE-2026-91881https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9#dell #Dell #TerraformProviderforRedfish#CVE_2026_91881#bot", "url": "https://infosec.exchange/users/cve/statuses/117441217601457541"}, {"timestamp": "2026-10-15T14:58:04.773Z", "date_only": false, "value": "2026-10-15T14:58:04.773346Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-91881", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T14:58:04.773Z", "date_only": false, "value": "2026-10-15T14:58:04.773346Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91881", "record": "FKIE_CVE-2026-91881", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T14:58:50.099Z", "date_only": false, "value": "2026-10-15T14:58:50.099Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-91881", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T14:58:50.099Z", "date_only": false, "value": "2026-10-15T14:58:50.099Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-91881", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:17:38.510Z", "date_only": false, "value": "2026-10-15T15:17:38.510", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91881", "record": "FKIE_CVE-2026-91881", "field": "lastModified"}]}