CVE-2026-22063medium

CVE-2026-22063: medium-severity vulnerability in NetApp E-Series SANtricity OS Controller…

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

Published

Follow this CVE+ Monitor StorageGRID+ Monitor ONTAP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.1%
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
NetApp · E-Series SANtricity OS Controller SoftwareNetApp · ONTAP 9NetApp · StorageGRID (formerly StorageGRID Webscale)
Related CVEs — NetApp E-Series SANtricity OS Controller…

In the same product, most dangerous first.

CVE-2018-5492—CVE-2018-5492EPSS 2.9%CVE-2020-8571—CVE-2020-8571EPSS 1.8%CVE-2023-27314HIGHDenial of Service Vulnerability in ONTAP 9EPSS 0.9%CVE-2019-17273—CVE-2019-17273EPSS 0.7%CVE-2023-27318MEDIUMDenial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) EPSS 0.7%CVE-2023-27317MEDIUMInformation Disclosure Vulnerability in ONTAP 9 EPSS 0.4%