Advisories · Technology

NetApp ONTAP 9.

Every CVE that names NetApp ONTAP 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-22063 CVE record

CVSS 6.0 Medium

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
- NetApp ONTAP 9
- NetApp StorageGRID (formerly StorageGRID Webscale)
- Weak cryptography or TLS
Not analysed yet 27 Oct 2026
CVE-2026-22049 CVE record

CVSS 8.7 High

Authentication bypass in NETAPP ONTAP 9
- NETAPP ONTAP 9
- Authentication bypass
Not analysed yet 22 Jul 2026
CVE-2026-22052 CVE record

CVSS 5.3 Medium

Sensitive information in error messages in NETAPP ONTAP 9
- NETAPP ONTAP 9
- Information disclosure
Not analysed yet 4 Mar 2026
CVE-2026-22050 CVE record

CVSS 6.9 Medium

Insecure direct object reference in NETAPP ONTAP 9
- NETAPP ONTAP 9
- Broken access control
Not analysed yet 12 Jan 2026
CVE-2024-21985 CVE record

CVSS 7.6 High

Privilege Escalation Vulnerability in ONTAP 9
- NetApp ONTAP 9
- Privilege escalation
Not analysed yet 26 Jan 2024
CVE-2024-21982 CVE record

CVSS 4.8 Medium

CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9
- NetApp ONTAP 9
Not analysed yet 11 Jan 2024
CVE-2023-27317 CVE record

CVSS 4.3 Medium

Information Disclosure Vulnerability in ONTAP 9
- NetApp ONTAP 9
- Information disclosure
Not analysed yet 15 Dec 2023
CVE-2023-27314 CVE record

CVSS 7.5 High

Denial of Service Vulnerability in ONTAP 9
- NetApp ONTAP 9
- Denial of service
Not analysed yet 12 Oct 2023