O9
Product
ONTAP 9
by NetApp · last CVE Oct 27, 2026
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 6Medium 3Low 0
Watch

Add ONTAP 9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-38475
In wildKEV
9.1
100%
Jul 1
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
Affected: 0
CVE-2026-22049
8.8
1%
Jul 22
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when…
Affected: 9.16.1 before 9.19.1
CVE-2022-42915
8.1
4%
Oct 29
curl before 7.86.0 has a double free
Affected: All versions, or not specified
CVE-2024-53580
7.5
1%
Dec 18
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function
Affected: All versions, or not specified
CVE-2024-6119
7.5
67%
Sep 3
Possible denial of service in X.509 name checks
Affected: All versions, or not specified
CVE-2024-26461
7.5
1%
Feb 29
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c
Affected: All versions, or not specified
CVE-2022-27780
7.5
3%
Jun 1
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it…
Affected: 0
CVE-2026-22063
New
6.0–Oct 27
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
Affected: before 9.18.1
CVE-2023-27535
5.9
2%
Mar 30
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers
Affected: All versions, or not specified
CVE-2024-26458
5.3
1%
Feb 29
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c
Affected: All versions, or not specified
Showing 10