Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,023All CVEsplus 18,873 rejected
  • 715Last 24 hours3,284 in the last 7 days
  • 17,381Last 30 days1,556 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20261362012138
2025133007126
20240290011119
20231470012108
2022046001096
20214613502886
2020197001758
20196118002541
2018453001216
20170220044

Latest CVEs

138 CVEs, newest first

CVEs, newest first
Title
CVE-2026-22060
CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP · StorageGRID (formerly StorageGRID Webscale)
Medium6.9
CVE-2026-22058
CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP · StorageGRID (formerly StorageGRID Webscale)
Critical9.1
CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp ProductsNetApp · ONTAP 9
Medium6.0
CVE-2026-22061
CVE-2026-22061 Debug Log Information Disclosure Vulnerability in TridentNetApp · Trident
High8.2
CVE-2026-22056
CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Low2.3
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…NETAPP · ONTAP 9
High8.7
CVE-2026-22055
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…NETAPP · Active IQ OneCollect
Medium5.3
CVE-2026-22054
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…NETAPP · Active IQ Config Advisor
Medium5.3
CVE-2026-22051
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful…NETAPP · StorageGRID (formerly StorageGRID Webscale)
Low2.3
CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an…NETAPP · ONTAP 9
Medium5.3
CVE-2026-22048
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID…NETAPP · StorageGRID (formerly StorageGRID Webscale)
High7.1
CVE-2026-22050
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a…NETAPP · ONTAP 9
Medium6.9
CVE-2025-26517
CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium5.4
CVE-2025-26516
CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium5.3
CVE-2025-26515
CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
High7.5
CVE-2025-26514
CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium6.4
CVE-2025-26513
The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local…NetApp · SAN Host Utilities for Windows
High7.0
CVE-2025-26512
CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter
Critical9.9
CVE-2025-26511
Cassandra-Lucene-Index allows bypass of Cassandra RBACNetApp · Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin
High8.8
CVE-2024-21994
CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium4.3
CVE-2024-21993
Information Disclosure Vulnerability in SnapCenterNetApp · SnapCenter
Medium5.7
CVE-2024-21988
CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID (formerly StorageGRID Webscale)
Medium5.3
CVE-2024-21990
Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utilityNetApp · ONTAP Select Deploy administration utility
Medium5.4
CVE-2024-21989
Privilege Escalation Vulnerability in ONTAP Select Deploy administration utilityNetApp · ONTAP Select Deploy administration utility
High8.1
CVE-2024-21984
Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium5.9
CVE-2024-21983
Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID
Medium6.5
CVE-2024-21987
Improper Authorization Vulnerability in SnapCenterNetApp · SnapCenter
Medium5.4
CVE-2023-27318
Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID (formerly StorageGRID Webscale)
Medium6.5
CVE-2024-21985
Privilege Escalation Vulnerability in ONTAP 9NetApp · ONTAP 9
High7.6
CVE-2024-21982
CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9NetApp · ONTAP 9
Medium4.8
CVE-2023-27319
CVE-2023-27319 Information Disclosure Vulnerability in ONTAP MediatorNetApp · ONTAP Mediator
Medium5.3
CVE-2023-27317
Information Disclosure Vulnerability in ONTAP 9NetApp · ONTAP 9
Medium4.3
CVE-2023-27316
Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter
High8.8
CVE-2023-27314
Denial of Service Vulnerability in ONTAP 9NetApp · ONTAP 9
High7.5
CVE-2023-27313
Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter
High8.3
CVE-2023-27312
Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphereNetApp · SnapCenter Plugin for VMware vSphere
Medium5.4
CVE-2023-27315
Information Disclosure Vulnerability in SnapGathersNetApp · SnapGathers
Medium6.5
CVE-2023-27311
NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architecture resolves this issue - obtaining the…Information Disclosure Vulnerability in NetApp BlueXP Connector
Medium5.3
CVE-2023-1096
SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to gain…SnapCenter
Critical9.8
CVE-2022-38734
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could…Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
High7.5
CVE-2022-23240
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows…Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows
Medium6.5
CVE-2022-23239
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows…Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows
Medium4.8
CVE-2022-38733
OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.OnCommand Insight
High8.6
CVE-2022-23241
Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated…Clustered Data ONTAP
High8.1
CVE-2022-38732
SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be…SnapCenter
High7.5
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an…Active IQ Unified Manager
Medium5.3
CVE-2022-23238
Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are…StorageGRID (formerly StorageGRID Webscale)
Medium6.5
CVE-2022-23237
E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to…E-Series SANtricity OS Controller Software 11.x
Medium6.1
CVE-2022-23236
E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged…E-Series SANtricity OS Controller Software 11.x
Medium4.4
CVE-2022-23234
SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.SnapCenter
Medium5.5