2
CVEs
0
Critical
1
High
0
KEV
0
PoC
0
Unpatched C/H
50.0%
Patch Rate
0.4%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
1
Monthly CVE Trend
Affected Products (30)
Oncommand Insight
809
Debian Linux
753
Active Iq Unified Manager
742
Oncommand Workflow Automation
620
Fedora
573
Snapcenter
524
MySQL
477
Ubuntu Linux
420
Cloud Backup
278
Linux Kernel
245
Java
234
H700s Firmware
231
H410s Firmware
230
H300s Firmware
230
H500s Firmware
230
E Series Santricity Os Controller
227
Opensuse
207
Leap
206
Steelstore Cloud Integrated Storage
198
H410c Firmware
189
Jdk
177
Solidfire
174
Snapmanager
173
Jre
169
Hci Management Node
165
Clustered Data Ontap
165
Oncommand Unified Manager
164
Enterprise Linux Workstation
151
Enterprise Linux Server
150
Enterprise Linux Desktop
149
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-22049 | MFA bypass in NetApp ONTAP 9.16.1 and later occurs when WebAuthn multi-factor authentication is configured, stemming from improper handling of the WebAuthn Relying Party ID. An attacker who already holds valid credentials can defeat the second authentication factor and gain full administrative access to the storage management plane. No public exploit identified at time of analysis; the flaw is vendor-reported by NetApp and not listed in CISA KEV. | HIGH | 8.7 | 0.5% | 44 |
|
| CVE-2026-22056 | Partial Denial of Service in NetApp StorageGRID versions 11.5 and higher arises from unbounded resource allocation (CWE-774) reachable only under a non-standard configuration and specific operational scenario. An authenticated network attacker with some degree of environmental control can exhaust handles or descriptors to degrade availability, though impact is explicitly partial and limited to the vulnerable system. No public exploit code has been identified and no active exploitation is confirmed; the vendor-assigned CVSS 4.0 score of 2.3 accurately reflects the tightly constrained real-world risk. | LOW | 2.3 | 0.2% | 12 |
No patch
|