Newest advisories and security-relevant NetApp analysis, newest first.
CVE-2026-101304, CVE-2026-101305, CVE-2026-101306 — Successful exploitation of these vulnerabilities could lead to disclosure of sensitive information or addition or modification of data.
· NetApp Security Advisory
CVE-2026-58098 — Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS).
· NetApp Security Advisory
CVE-2026-55952 — Successful exploitation of this vulnerability could lead to Denial of Service (DoS).
· NetApp Security Advisory
CVE-2026-55737 — Successful exploitation of this vulnerability could lead to Denial of Service (DoS).
· NetApp Security Advisory
CVE-2026-101302 — Successful exploitation of this vulnerability could lead to Denial of Service (DoS).
· NetApp Security Advisory
CVE-2026-59251 — Successful exploitation of this vulnerability could lead to Denial of Service (DoS).
· NetApp Security Advisory
Home / Security Hub
A living, machine-compiled index of NetApp security advisories, ONTAP-relevant CVEs, and known-exploited vulnerabilities — pulled automatically from official sources so you can check "is my cluster affected?" fast.
NTAP-20261009-0002 — CVE-2026-72636 Elasticsearch Vulnerability in NetApp Products Brocade SAN Navigator (SANnav)NTAP-20261009-0009 — CVE-2026-72679 Elasticsearch Vulnerability in NetApp Products Brocade SAN Navigator (SANnav)NTAP-20261009-0024 — September 2026 FreeBSD jail Vulnerabilities in NetApp Products ONTAP 9NTAP-20261009-0022 — CVE-2026-58098 FreeBSD Vulnerability in NetApp Products ONTAP 9NTAP-20261009-0017 — CVE-2026-55952 Erlang/OTP Vulnerability in NetApp Products ONTAP Select Deploy administration utility, SnapCenter Plug-in for VMware vSphereNTAP-20261009-0018 — CVE-2026-55737 Erlang/OTP Vulnerability in NetApp Products ONTAP Select Deploy administration utility, ONTAP tools for VMware vSphere 10NTAP-20261009-0019 — CVE-2026-101302 FreeBSD Vulnerability in NetApp Products ONTAP 9NTAP-20261009-0014 — CVE-2026-72685 Elasticsearch Vulnerability in NetApp Products Brocade SAN Navigator (SANnav)166 advisories published and 607 updated in the last 21 days. Latest publication: 2026-10-09.
| Advisory | Published | Severity | Affected product | Status | Fix | CVEs |
|---|---|---|---|---|---|---|
NTAP-20261009-0024 | 2026-10-09 | — | ONTAP 9 | Interim | interim | CVE-2026-101304, CVE-2026-101305, CVE-2026-101306 |
NTAP-20261009-0022 | 2026-10-09 | — | ONTAP 9 | Interim | interim | CVE-2026-58098 |
NTAP-20261009-0017 | 2026-10-09 | HIGH 7.5 | ONTAP Select Deploy administration utility, SnapCenter Plug-in for VMw | Interim | interim | CVE-2026-55952 |
NTAP-20261009-0018 | 2026-10-09 | HIGH 7.5 | ONTAP Select Deploy administration utility, ONTAP tools for VMware vSp | Interim | interim | CVE-2026-55737 |
NTAP-20261009-0019 | 2026-10-09 | — | ONTAP 9 | Interim | interim | CVE-2026-101302 |
NTAP-20261009-0016 | 2026-10-09 | HIGH 7.5 | ONTAP Select Deploy administration utility, SnapCenter, SnapCenter Plu | Interim | interim | CVE-2026-59251 |
NTAP-20261009-0020 | 2026-10-09 | HIGH 8.2 | ONTAP 9 | Interim | interim | CVE-2026-84782 |
NTAP-20261009-0021 | 2026-10-09 | — | ONTAP 9 | Interim | interim | CVE-2026-58099, CVE-2026-58100 |
NTAP-20261009-0023 | 2026-10-09 | — | ONTAP 9 | Interim | interim | CVE-2026-101303 |
NTAP-20261007-0013 | 2026-10-07 | HIGH 7.5 | Brocade Fabric Operating System Firmware, ONTAP 9 | Interim | interim | CVE-2026-63292 |
All 4,521 advisories have detail pages (1,832 ONTAP-relevant, 2,689 for other NetApp products) — browse them by product family, through the CVE index, or in the rolling digest.
| CVE | Published | Severity | CVSS | Summary |
|---|---|---|---|---|
CVE-2026-22061 | 2026-10-09 | HIGH | 8.2 | Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticate |
CVE-2026-93546 | 2026-10-01 | HIGH | 8.8 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with |
CVE-2026-79768 | 2026-10-01 | MEDIUM | 5.3 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when c |
CVE-2026-73637 | 2026-10-01 | HIGH | 7.3 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platfo |
CVE-2026-73636 | 2026-10-01 | HIGH | 8.1 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2. |
CVE-2026-63718 | 2026-10-01 | HIGH | 7.5 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerabil |
CVE-2026-63686 | 2026-10-01 | HIGH | 7.5 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on al |
CVE-2026-63292 | 2026-10-01 | HIGH | 7.5 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 |
CVE-2026-63045 | 2026-10-01 | HIGH | 7.5 | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Serve |
CVE-2026-59797 | 2026-10-01 | CRITICAL | 9.8 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related ex |
Browse the full CVE index (8510 CVEs) →
| CVE | Added | Product | Name |
|---|---|---|---|
| No NetApp products currently on the CISA KEV list. | |||
Subscribe to the advisory RSS feed ↗
Generated 2026-10-10 · unofficial community resource.