CVE-2026-22063mediumCWE-327

CVE-2026-22063: fallo de gravedad media en NetApp E-Series SANtricity OS Controller…

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear StorageGRID+ Monitorear ONTAP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6epss 0.1%
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
NetApp · E-Series SANtricity OS Controller SoftwareNetApp · ONTAP 9NetApp · StorageGRID (formerly StorageGRID Webscale)
CVEs relacionadas — NetApp E-Series SANtricity OS Controller…

En el mismo producto, de las más peligrosas a las menos.

CVE-2018-5492—CVE-2018-5492EPSS 2.9%CVE-2020-8571—CVE-2020-8571EPSS 1.8%CVE-2023-27314HIGHDenial of Service Vulnerability in ONTAP 9EPSS 0.9%CVE-2019-17273—CVE-2019-17273EPSS 0.7%CVE-2023-27318MEDIUMDenial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) EPSS 0.7%CVE-2023-27317MEDIUMInformation Disclosure Vulnerability in ONTAP 9 EPSS 0.4%