Medium severity · published Oct 27, 2026
CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
New
6.0
CVSS
–
EPSS
No
On KEV
Description
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-Series SANtricity OS Controller Software · NetApp
0 · source: vendor
O9
ONTAP 9 · NetApp
before 9.18.1 · source: vendor
SF
StorageGRID (formerly StorageGRID Webscale) · NetApp
through 12.2.0 · source: vendor
Affected product
ES
E-Series SANtricity OS Controller Software
NetApp