Login Request a demo
O9
Product
ONTAP 9
by NetApp · last CVE Oct 27, 2026
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.1
Max CVSS
1
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 6Medium 5Low 0
Severity
All severities12Critical1High6Medium5Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add ONTAP 9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-22063
New
6.0–Oct 27
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
Affected: before 9.18.1
CVE-2023-27535
5.9
2%
Mar 30
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers
Affected: All versions, or not specified
CVE-2024-26458
5.3
1%
Feb 29
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c
Affected: All versions, or not specified
CVE-2026-22052
4.3
0%
Mar 4
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability
Affected: 9.12.1 and higher
CVE-2026-22050
4.3
0%
Jan 12
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote…
Affected: 9.16.1 before 9.16.1P9; 9.17.1 before 9.17.1P2
Showing 5