Home / Security / Advisories / NTAP-20251010-0011

NTAP-20251010-0011 — CVE-2025-7709 SQLite Vulnerability in NetApp Products

Published 2025-10-10 · Updated 2026-09-18 · Status: Interim · Exploitation: Public · Severity: not scored · ONTAP affected: Yes

Official advisory: NTAP-20251010-0011 on security.netapp.com ↗. Affected versions, fixed releases, and workarounds live there — this page is a summary.

Product family: Active IQ Unified Manager · ONTAP · Other NetApp products · NetApp Console / BlueXP | ONTAP-relevant

CVEs in this advisory

CVE-2025-7709 · site index

Impact

Successful exploitation of this vulnerability could lead to addition or modification of data or Denial of Service (DoS). <br><br> Active IQ Unified Manager for VMware vSphere: <br> Affects version 9.16.

Affected products

Active IQ Unified Manager for Microsoft Windows
Active IQ Unified Manager for VMware vSphere
Cloud Volumes ONTAP Mediator
FAS/AFF BIOS - A900/9500
NetApp Console Agent OVA
ONTAP tools for VMware vSphere 10

Official fixes

Active IQ Unified Manager for VMware vSphere — vendor fix ↗
Active IQ Unified Manager for VMware vSphere — vendor fix ↗

References

https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g ↗

What to do

Check the affected products listed above against the official advisory's affected-versions table — that is where the exact ONTAP 9 release, ONTAP tool, or management product versions are named.
If affected and a fixed release exists, plan the upgrade — see the ONTAP upgrade runbook.
If exploitation is listed as "active", treat remediation as urgent and review exposure (management LIFs, ONTAP S3, SnapMirror endpoints).
Harden in parallel: security hardening baseline and ransomware protection on ONTAP.