Home / Security / Advisories / NTAP-20260626-0014

NTAP-20260626-0014 — CVE-2026-49759 Erlang/OTP Vulnerability in NetApp Products

Published 2026-06-26 · Updated 2026-08-19 · Status: Interim · Exploitation: Public · Severity: HIGH 8.2 · ONTAP affected: Yes

Official advisory: NTAP-20260626-0014 on security.netapp.com ↗. Affected versions, fixed releases, and workarounds live there — this page is a summary.

Product family: ONTAP · SnapCenter | ONTAP-relevant | highest CVSS: 8.2

CVEs in this advisory

CVE-2026-49759 — HIGH · CVSS 8.2 · site index

What the CVE records say

CVE-2026-49759 — Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated ErlDrvTermData spec[] array without checking bounds. A remote attacker who has established an SCTP association to a listening port can send a single crafted SCTP ERROR chunk containing enough cause codes to overflow the stack buffer, crashing the VM. The attacker can only write 16-bit values interleaved with a fixed tag, so the overflow does not provide a controlled return address, limiting exploitation to Denial of Service. A crafted SCTP ERROR chunk may also leak bits and pieces of Erlang VM memory into the received error packet observed by the Erlang process. Such data is already readable by the user running the Erlang VM, so the disclosure scope is limited. This issue affects OTP from OTP 17.0 before OTP 29.0.2, OTP 28.5.0.2 and OTP 27.3.4.13, corresponding to erts from 6.0 before 17.0.2, 16.4.0.2 and 15.2.7.9.

Impact

Successful exploitation of these vulnerabilities could lead to disclosure of sensitive information or Denial of Service (DoS).

Affected products

ONTAP Select Deploy administration utility
SnapCenter

References

https://github.com/erlang/otp/security/advisories/GHSA-6f4f-chj5-5g97 ↗

What to do

Check the affected products listed above against the official advisory's affected-versions table — that is where the exact ONTAP 9 release, ONTAP tool, or management product versions are named.
If affected and a fixed release exists, plan the upgrade — see the ONTAP upgrade runbook.
If exploitation is listed as "active", treat remediation as urgent and review exposure (management LIFs, ONTAP S3, SnapMirror endpoints).
Harden in parallel: security hardening baseline and ransomware protection on ONTAP.