Home / Security / Advisories / NTAP-20260724-0020

NTAP-20260724-0020 — July 2026 Java Platform Standard Edition 8u491 Vulnerabilities in NetApp Products

Published 2026-07-24 · Updated 2026-08-05 · Status: Interim · Exploitation: Public · Severity: not scored · ONTAP affected: No — other NetApp product

Official advisory: NTAP-20260724-0020 on security.netapp.com ↗. Affected versions, fixed releases, and workarounds live there — this page is a summary.

Product family: Brocade SAN firmware · NetApp Console / BlueXP · SolidFire / NetApp HCI · SnapCenter | other NetApp product

CVEs in this advisory

Impact

Successful attacks of these vulnerabilities can result in the unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, unauthorized update, insert or delete access to some of Oracle Java SE accessible data or unauthorized read access to a subset of Oracle Java SE accessible data.

Affected products

Brocade SAN Navigator (SANnav)
NetApp Console Agent
NetApp SolidFire & HCI Management Node
SnapCenter Plug-in for VMware vSphere

References

What to do

Compare your installed product and version against the affected list above and the official advisory's affected-versions table.
Apply the fixed release named in the official advisory, or the documented workaround if no fix ships yet.
Limit management-plane exposure (BMC/management interfaces, web UIs, SNMP) until patched.
Track follow-ups in the site CVE index and the security RSS feed.