11
CVEs
0
Critical
2
High
0
KEV
0
PoC
1
Unpatched C/H
18.2%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
7
LOW
2
Monthly CVE Trend
Affected Products (30)
Oncommand Insight
809
Debian Linux
753
Active Iq Unified Manager
742
Oncommand Workflow Automation
620
Fedora
573
Snapcenter
524
MySQL
477
Ubuntu Linux
420
Cloud Backup
278
Linux Kernel
245
Java
234
H700s Firmware
231
H410s Firmware
230
H300s Firmware
230
H500s Firmware
230
E Series Santricity Os Controller
227
Opensuse
207
Leap
206
Steelstore Cloud Integrated Storage
198
H410c Firmware
189
Jdk
177
Solidfire
174
Snapmanager
173
Jre
169
Hci Management Node
165
Clustered Data Ontap
165
Oncommand Unified Manager
164
Enterprise Linux Workstation
151
Enterprise Linux Server
150
Enterprise Linux Desktop
149
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-22049 | MFA bypass in NetApp ONTAP 9.16.1 and later occurs when WebAuthn multi-factor authentication is configured, stemming from improper handling of the WebAuthn Relying Party ID. An attacker who already holds valid credentials can defeat the second authentication factor and gain full administrative access to the storage management plane. No public exploit identified at time of analysis; the flaw is vendor-reported by NetApp and not listed in CISA KEV. | HIGH | 8.7 | 0.5% | 44 |
|
| CVE-2026-22054 | Hard-coded credentials in NetApp Active IQ Config Advisor 6.7.3 enable authenticated low-privileged attackers to perform unauthorized AutoSupport operations against connected NetApp infrastructure. The embedded credentials bypass intended access controls, allowing any account holder to trigger or manipulate AutoSupport telemetry functions beyond their assigned privilege level. No public exploit code exists and this vulnerability has not been added to the CISA KEV catalog at time of analysis. | MEDIUM | 5.3 | 0.0% | 27 |
No patch
|
| CVE-2026-22055 | Hard-coded credentials embedded in NetApp Active IQ OneCollect 2.7.3 allow any low-privileged authenticated user to perform unauthorized AutoSupport operations beyond their intended authorization scope. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms network-accessible exploitation with low complexity, requiring only a low-privilege account with no special attack conditions. No public exploit has been identified and the vulnerability does not appear in the CISA KEV catalog at time of analysis. | MEDIUM | 5.3 | 0.0% | 27 |
No patch
|
| CVE-2026-22052 | NetApp ONTAP 9.12.1 and later with S3 NAS buckets allows authenticated attackers to enumerate directory contents they lack authorization to access, resulting in unauthorized information disclosure. An attacker with valid credentials can exploit this to view sensitive file listings without proper permissions. No patch is currently available for this vulnerability. | MEDIUM | 4.3 | 0.0% | 22 |
No patch
|
| CVE-2026-22050 | Ontap versions up to 9.16.1 is affected by authorization bypass through user-controlled key (CVSS 4.3). | MEDIUM | 4.3 | 0.0% | 22 |
No patch
|
| CVE-2026-22056 | Partial Denial of Service in NetApp StorageGRID versions 11.5 and higher arises from unbounded resource allocation (CWE-774) reachable only under a non-standard configuration and specific operational scenario. An authenticated network attacker with some degree of environmental control can exhaust handles or descriptors to degrade availability, though impact is explicitly partial and limited to the vulnerable system. No public exploit code has been identified and no active exploitation is confirmed; the vendor-assigned CVSS 4.0 score of 2.3 accurately reflects the tightly constrained real-world risk. | LOW | 2.3 | 0.2% | 12 |
No patch
|
| CVE-2026-22051 | StorageGRID versions before 11.9.0.13 and 12.0.0.6 allow authenticated attackers with low privileges to execute arbitrary metrics queries, exposing metric data they lack authorization to access. The vulnerability requires low-privilege authentication and specific timing conditions but poses direct information disclosure risk in multi-tenant or role-restricted deployments where metric visibility should be compartmentalized. | LOW | 2.3 | 0.0% | 12 |
|
| CVE-2025-26514 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available. | MEDIUM | 6.4 | 0.0% | – |
No patch
|
| CVE-2025-26515 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | HIGH | 7.5 | 0.0% | – |
No patch
|
| CVE-2025-26516 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | MEDIUM | 5.3 | 0.1% | – |
No patch
|
| CVE-2025-26517 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | MEDIUM | 5.4 | 0.0% | – |
No patch
|