Content Library · Advisory
Browse 895 2026 NetApp advisory records in the NetApp Black Box content library. Page 5 of 8.
Showing all 120 items on this page
Source: https://security.netapp.com/advisory/NTAP-20260527-0008/
NetApp published this final advisory covering CVE-2026-45253; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0013/
NetApp published this final advisory covering CVE-2026-45252; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0010/
NetApp published this final advisory covering CVE-2026-45251; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0009/
NetApp published this final advisory covering CVE-2026-45250; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0002/
NetApp published this interim advisory covering CVE-2026-4480; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0007/
NetApp published this final advisory covering CVE-2026-39461; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0015/
NetApp published this final advisory covering CVE-2026-32710; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0004/
NetApp published this final advisory covering CVE-2026-3238; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0003/
NetApp published this final advisory covering CVE-2026-3012; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0006/
NetApp published this final advisory covering CVE-2026-2340; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0005/
NetApp published this final advisory covering CVE-2026-1933; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260527-0014/
NetApp published this interim advisory covering CVE-2017-1000405; the API labels exploitation information as **Public**. The API currently lists affected products as: Data ONTAP Edge; E-Series SANtricity OS Controller Software; NetApp Cloud Backup (formerly AltaVault); NetApp VASA Provider for Clustered Data ONTAP 6.x; ONTAP Select Deploy administration utility; OnCommand Balance; SnapProtect; StorageGRID (formerly StorageGRID Webscale).
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0001/
NetApp published this interim advisory covering CVE-2025-27516, CVE-2025-50059, CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, CVE-2025-30754, CVE-2025-30167, CVE-2024-56339, CVE-2025-48976, CVE-2025-3633, CVE-2025-53057, CVE-2025-53066, CVE-2024-12798, CVE-2024-12801, CVE-2025-36126, CVE-2024-6844, CVE-2024-6839, CVE-2024-6866, CVE-2025-6020, CVE-2025-21587, CVE-2025-30698, CVE-2025-2900, CVE-2025-4447, CVE-2024-5535, CVE-2025-5889, CVE-2024-35195, CVE-2025-7962, CVE-2025-54798, CVE-2025-50181, CVE-2025-50182, CVE-2025-68146, CVE-2025-56200; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0012/
NetApp published this interim advisory covering CVE-2026-42946; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0014/
NetApp published this interim advisory covering CVE-2026-42934; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0010/
NetApp published this interim advisory covering CVE-2026-42498; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0013/
NetApp published this interim advisory covering CVE-2026-40701; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0002/
NetApp published this interim advisory covering CVE-2026-40021; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0006/
NetApp published this interim advisory covering CVE-2026-34500; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0007/
NetApp published this interim advisory covering CVE-2026-34487; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0009/
NetApp published this interim advisory covering CVE-2026-34486; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0008/
NetApp published this interim advisory covering CVE-2026-34483; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0005/
NetApp published this interim advisory covering CVE-2026-32990; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0003/
NetApp published this interim advisory covering CVE-2026-29145; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0004/
NetApp published this interim advisory covering CVE-2026-25854; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0019/
NetApp published this interim advisory covering CVE-2025-30185; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0020/
NetApp published this interim advisory covering CVE-2025-27560; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0018/
NetApp published this interim advisory covering CVE-2025-20077; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0017/
NetApp published this interim advisory covering CVE-2023-6200; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260522-0015/
NetApp published this interim advisory covering CVE-2017-1000253; the API labels exploitation information as **Public**. The API currently lists affected products as: Data ONTAP Edge; NetApp Cloud Backup (formerly AltaVault); OnCommand Balance; SnapProtect.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0008/
NetApp published this interim advisory covering CVE-2026-7168; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0007/
NetApp published this interim advisory covering CVE-2026-7009; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0003/
NetApp published this interim advisory covering CVE-2026-6429; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0009/
NetApp published this interim advisory covering CVE-2026-6276; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0006/
NetApp published this interim advisory covering CVE-2026-6253; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0004/
NetApp published this interim advisory covering CVE-2026-5773; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0005/
NetApp published this interim advisory covering CVE-2026-5545; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0002/
NetApp published this interim advisory covering CVE-2026-2006; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260515-0001/
NetApp published this interim advisory covering CVE-2026-2005; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0004/
NetApp published this interim advisory covering CVE-2026-5928; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0006/
NetApp published this interim advisory covering CVE-2026-5450; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0005/
NetApp published this interim advisory covering CVE-2026-5435; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0002/
NetApp published this interim advisory covering CVE-2026-43500; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0001/
NetApp published this interim advisory covering CVE-2026-43284; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0009/
NetApp published this final advisory covering CVE-2026-35469; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0007/
NetApp published this interim advisory covering CVE-2026-34480; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0008/
NetApp published this interim advisory covering CVE-2026-34477; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0010/
NetApp published this interim advisory covering CVE-2026-29181; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260513-0003/
NetApp published this interim advisory covering CVE-2024-36899; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0010/
NetApp published this final advisory covering CVE-2026-34059; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0016/
NetApp published this final advisory covering CVE-2026-34032; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0015/
NetApp published this final advisory covering CVE-2026-33857; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0012/
NetApp published this final advisory covering CVE-2026-33523; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0014/
NetApp published this final advisory covering CVE-2026-33007; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0017/
NetApp published this final advisory covering CVE-2026-33006; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0009/
NetApp published this final advisory covering CVE-2026-29169; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0011/
NetApp published this final advisory covering CVE-2026-29168; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0007/
NetApp published this final advisory covering CVE-2026-28780; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0020/
NetApp published this interim advisory covering CVE-2026-27137; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center; Astra Control Center - NetApp Kubernetes Monitoring Operator; Data Infrastructure Insights Telegraf Agent; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0019/
NetApp published this interim advisory covering CVE-2026-24308; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0013/
NetApp published this final advisory covering CVE-2026-24072; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0008/
NetApp published this final advisory covering CVE-2026-23918; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0004/
NetApp published this interim advisory covering CVE-2026-23003; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0003/
NetApp published this interim advisory covering CVE-2026-22997; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0005/
NetApp published this interim advisory covering CVE-2026-22992; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H610S; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0006/
NetApp published this interim advisory covering CVE-2026-22991; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp HCI Baseboard Management Controller (BMC) - H610S; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260508-0018/
NetApp published this interim advisory covering CVE-2026-0603; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0015/
NetApp published this interim advisory covering CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0003/
NetApp published this final advisory covering CVE-2026-7270; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0007/
NetApp published this final advisory covering CVE-2026-7164; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0006/
NetApp published this final advisory covering CVE-2026-42512; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0005/
NetApp published this final advisory covering CVE-2026-42511; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0004/
NetApp published this final advisory covering CVE-2026-39457; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0002/
NetApp published this final advisory covering CVE-2026-35547; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP 9.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0008/
NetApp published this interim advisory covering CVE-2026-33228; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0001/
NetApp published this interim advisory covering CVE-2026-31431; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0011/
NetApp published this interim advisory covering CVE-2026-28369; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0010/
NetApp published this interim advisory covering CVE-2026-28368; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0009/
NetApp published this final advisory covering CVE-2026-28367; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0014/
NetApp published this interim advisory covering CVE-2026-24880; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0013/
NetApp published this interim advisory covering CVE-2026-22732; the API labels exploitation information as **Public**. The API currently lists affected products as: Element Plug-in for vCenter Server; Management Services for Element Software and NetApp HCI; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260501-0012/
NetApp published this interim advisory covering CVE-2025-20096; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0014/
NetApp published this final advisory covering CVE-2026-6386; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0013/
NetApp published this final advisory covering CVE-2026-5398; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0003/
NetApp published this final advisory covering CVE-2026-40372; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0007/
NetApp published this interim advisory covering CVE-2026-23865; the API labels exploitation information as **Public**. The API currently lists affected products as: OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0008/
NetApp published this interim advisory covering CVE-2026-22008; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0009/
NetApp published this interim advisory covering CVE-2026-22003; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0010/
NetApp published this interim advisory covering CVE-2026-20652; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0015/
NetApp published this interim advisory covering CVE-2025-69277; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0002/
NetApp published this final advisory covering CVE-2025-46836; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0001/
NetApp published this interim advisory covering CVE-2019-20916; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0006/
NetApp published this interim advisory covering CVE-2026-35234, CVE-2026-35235, CVE-2026-34272; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0005/
NetApp published this interim advisory covering CVE-2026-35237, CVE-2026-21998, CVE-2026-35236, CVE-2026-34303, CVE-2026-35240, CVE-2026-35238, CVE-2026-35239, CVE-2026-22015, CVE-2026-22009, CVE-2026-22017, CVE-2026-22004, CVE-2026-34270, CVE-2026-34276, CVE-2026-34308, CVE-2026-22001, CVE-2025-14017, CVE-2026-22002, CVE-2026-34271, CVE-2026-22005, CVE-2025-15467, CVE-2026-34304; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; OnCommand Insight; SnapCenter.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260429-0004/
NetApp published this interim advisory covering CVE-2026-34267, CVE-2026-34278, CVE-2026-34293; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for Microsoft Windows; Active IQ Unified Manager for VMware vSphere; OnCommand Insight.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0010/
NetApp published this interim advisory covering CVE-2026-5704; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Console Agent Container (cbs_catalog); NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0006/
NetApp published this interim advisory covering CVE-2026-35388; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0005/
NetApp published this interim advisory covering CVE-2026-35387; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; E-Series SANtricity OS Controller Software; FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0004/
NetApp published this interim advisory covering CVE-2026-35386; the API labels exploitation information as **Public**. The API currently lists affected products as: FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0003/
NetApp published this interim advisory covering CVE-2026-33810; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0009/
NetApp published this final advisory covering CVE-2026-32772; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0008/
NetApp published this final advisory covering CVE-2026-27699; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0014/
NetApp published this interim advisory covering CVE-2026-23230; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0013/
NetApp published this interim advisory covering CVE-2026-23112; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0015/
NetApp published this interim advisory covering CVE-2026-23098; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0019/
NetApp published this interim advisory covering CVE-2026-22998; the API labels exploitation information as **Public**. The API currently lists affected products as: Active IQ Unified Manager for VMware vSphere; NetApp HCI Baseboard Management Controller (BMC) - H610S; ONTAP Select Deploy administration utility.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0012/
NetApp published this interim advisory covering CVE-2025-68263; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0002/
NetApp published this interim advisory covering CVE-2025-68121; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0007/
NetApp published this final advisory covering CVE-2025-64756; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0011/
NetApp published this interim advisory covering CVE-2025-37924; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP Select Deploy administration utility; ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0016/
NetApp published this interim advisory covering CVE-2025-22041; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0017/
NetApp published this interim advisory covering CVE-2025-22040; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0018/
NetApp published this interim advisory covering CVE-2025-21947; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260424-0001/
NetApp published this interim advisory covering CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center; ONTAP tools for VMware vSphere 10; Trident; Trident Protect.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0002/
NetApp published this interim advisory covering CVE-2026-39865; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Shift Toolkit; Storage Manager for ProxMox.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0008/
NetApp published this final advisory covering CVE-2026-3676; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0005/
NetApp published this interim advisory covering CVE-2026-33186; the API labels exploitation information as **Public**. The API currently lists affected products as: ONTAP tools for VMware vSphere 10.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0017/
NetApp published this interim advisory covering CVE-2026-33056; the API labels exploitation information as **Public**. The API currently lists affected products as: NetApp Console Agent Container (cbs_catalog); NetApp HCI Baseboard Management Controller (BMC) - H610S.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0004/
NetApp published this final advisory covering CVE-2026-32746; the API labels exploitation information as **Public**. The API did not yet publish an affected-product list, so this record should not be read as confirmation that ONTAP is affected; recheck the official advisory as the interim analysis changes.
Open sourceSource: https://security.netapp.com/advisory/NTAP-20260422-0006/
NetApp published this interim advisory covering CVE-2026-27142; the API labels exploitation information as **Public**. The API currently lists affected products as: Astra Control Center; Astra Control Center - NetApp Kubernetes Monitoring Operator; ONTAP tools for VMware vSphere 10.
Open source