CVE-2026-76113 Dell CVE debrief

Who should care

Defenders and administrators of Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 should assess exposure and prioritize remediation. This includes reviewing the current deployment, identifying potentially affected systems, and planning for remediation. Security teams should also verify affected versions and remediation status to ensure the vulnerability is properly addressed.

Why it matters

CVE-2026-76113 is a medium-severity vulnerability in Dell Terraform Provider for Redfish that can lead to information exposure. Defenders and administrators should assess exposure, prioritize remediation, and verify affected versions and remediation status.

• Information exposure to high privileged attackers with remote access
• Potential data breaches due to sensitive information disclosure
• Need for verification of affected versions and remediation status

Technical summary

Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 contain an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component. This vulnerability could lead to information exposure for high privileged attackers with remote access. The affected component is part of the Dell Terraform Provider for Redfish, which is used for managing Redfish-enabled systems. Defenders should assess the technical impact and prioritize remediation accordingly. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM.

Defensive priority

Assess exposure and prioritize remediation for Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1.

Recommended defensive actions

• Assess exposure of Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1 in your environment
• Prioritize remediation for high privileged systems with remote access
• Verify vendor remediation and upgrade to version 1.6.2 or later if affected
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability in Dell Terraform Provider for Redfish versions 1.1.0 through 1.6.1. The information exposure could lead to potential data breaches. Defenders should verify affected versions and remediation status. The source confidence is limited to the provided CVE metadata and source item details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.