NetApp vulnerabilities
74 published CVEs name NetApp among the affected products.
- Published CVEs
- 74
- Last 12 months
- 12
- Critical
- 9
- Known exploited
- 0
Critical 9High 29Medium 34Low 2Not scored 0
CVEs per yearBy the year they were published
- 20171
- 20187
- 201914
- 20202
- 202013
- 20238
- 202410
- 20257
- 202612
Newest CVEs
- CVE-2026-22060
CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
NETAPP · StorageGRID (formerly StorageGRID Webscale)
Medium6.9 - CVE-2026-22058
CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
NETAPP · StorageGRID (formerly StorageGRID Webscale)
Critical9.1 - CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
NetApp · ONTAP 9
Medium6.0 - CVE-2026-22061
CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident
NetApp · Trident
High8.2 - CVE-2026-22056
CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
NetApp · StorageGRID
Low2.3 - CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…
NETAPP · ONTAP 9
High8.7 - CVE-2026-22055
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…
NETAPP · Active IQ OneCollect
Medium5.3 - CVE-2026-22054
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…
NETAPP · Active IQ Config Advisor
Medium5.3 - CVE-2026-22051
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful…
NETAPP · StorageGRID (formerly StorageGRID Webscale)
Low2.3 - CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an…
NETAPP · ONTAP 9
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-200 Exposure of sensitive information7
- CWE-20 Improper input validation6
- CWE-269 Improper privilege management4
- CWE-259 3
- CWE-319 Cleartext transmission of sensitive information3
- CWE-79 Cross-site scripting (XSS)3
- CWE-863 Incorrect authorization3
- CWE-1188 2
- CWE-209 Sensitive information in an error message2
- CWE-248 2