Vulnerability in NetApp ONTAP 9

[ Description ]Official description

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund27 Oct 2026WID-SEC-2026-4200

  NetApp Data ONTAP: Vulnerability allows information disclosure Translated from German

  CVE-2026-22063

[ References ]References

• security.netapp.com/advisory/NTAP-20261027-0001