Log in Start free

NETAPP

Products

ProductCVEsExploitedLatest
ONTAP 98–Oct 27, 2026
StorageGRID8–Aug 28, 2026
StorageGRID (formerly StorageGRID Webscale)8–Nov 3, 2026
SnapCenter5–Mar 24, 2025
ONTAP Select Deploy administration utility2–Apr 17, 2024
ONTAP Mediator1–Dec 21, 2023
SAN Host Utilities for Windows1–Aug 7, 2025
SnapCenter Plugin for VMware vSphere1–Oct 12, 2023
SnapGathers 1–Oct 12, 2023
Active IQ Config Advisor1–Jun 3, 2026
Trident1–Oct 9, 2026
Active IQ OneCollect1–Jun 3, 2026
E-Series SANtricity OS Controller Software1–Oct 27, 2026
Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin1–Feb 13, 2025
NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S1–Jun 29, 2020

Exploited and recent CVEs

  • CVE-2026-22060 Medium 6.9 CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.3%
  • CVE-2026-22058 Critical 9.1 CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.3%
  • CVE-2026-22063 Medium 6.0 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products <0.1%
  • CVE-2026-22063 Medium 6.0 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products <0.1%
  • CVE-2026-22063 Medium 6.0 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products <0.1%
  • CVE-2026-22061 High 8.2 CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident 0.1%
  • CVE-2026-22056 Low 2.3 CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.3%
  • CVE-2026-22049 High 8.7 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could a 0.5%
  • CVE-2026-22055 Medium 5.3 Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. 0.2%
  • CVE-2026-22054 Medium 5.3 Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. 0.2%
  • CVE-2026-22051 Low 2.3 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker 0.2%
  • CVE-2026-22052 Medium 5.3 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the conte 0.2%
  • CVE-2026-22048 High 7.1 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible 0.3%
  • CVE-2026-22050 Medium 6.9 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot 0.2%
  • CVE-2025-26517 Medium 5.4 CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.2%
  • CVE-2025-26516 Medium 5.3 CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.4%
  • CVE-2025-26515 High 7.5 CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.3%
  • CVE-2025-26514 Medium 6.4 CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.2%
  • CVE-2025-26513 High 7.0 The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges. 0.1%
  • CVE-2025-26512 Critical 9.9 CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter 0.7%
  • CVE-2025-26511 High 8.8 Cassandra-Lucene-Index allows bypass of Cassandra RBAC 0.6%
  • CVE-2024-21994 Medium 4.3 CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.4%
  • CVE-2024-21993 Medium 5.7 Information Disclosure Vulnerability in SnapCenter 0.2%
  • CVE-2024-21988 Medium 5.3 CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.2%
  • CVE-2024-21990 Medium 5.4 Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility 0.3%
  • CVE-2024-21989 High 8.1 Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility 0.4%
  • CVE-2024-21984 Medium 5.9 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.3%
  • CVE-2024-21983 Medium 6.5 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.5%
  • CVE-2024-21987 Medium 5.4 Improper Authorization Vulnerability in SnapCenter 0.3%
  • CVE-2023-27318 Medium 6.5 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 0.7%