Complete feed
Recently updated
Advisories the vendor has revised
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2026-73282] OpenSSH Vulnerability in NetApp Products
OpenSSH versions through 10.4 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-45205] IBM Db2 Vulnerability in NetApp Products
IBM Db2 Server versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 on Linux and Unix are susceptible to a vulnerability in commons-configuration2-2.10.1. Successful exploitation of this vulnerability could lead to Denial of Service (DoS). NetApp states there is no workaround available at this time.
Medium [CVE-2026-56145] Elasticsearch Vulnerability in NetApp Products
Elasticsearch versions 8.19.0 through 8.19.17, 9.3.0 through 9.3.6, and 9.4.0 through 9.4.3 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-63144] Elasticsearch Vulnerability in NetApp Products
Elasticsearch versions 8.19.0 through 8.19.18, 9.3.0 through 9.3.7, and 9.4.0 through 9.4.3 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-3276] Python Vulnerability in NetApp Products
Python versions through 3.13.13, 3.14.0 through 3.14.5, and 3.15.0a1 through 3.15.0b1 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, Management Services for Element Software and NetApp HCI. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-42505] Golang Vulnerability in NetApp Products
Golang versions prior to 1.25.12, 1.26.0-0 prior to 1.26.5, and 1.27.0-0 prior to 1.27.0-rc.2 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information. Successful exploitation of this vulnerability could lead to disclosure of sensitive information. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-41839] Spring Framework Vulnerability in NetApp Products
Spring Framework versions 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, and 5.3.0 through 5.3.48 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-9828] Logback Vulnerability in NetApp Products
Logback versions prior to 1.5.33 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-10723] ISC BIND Vulnerability in NetApp Products
ISC BIND versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, and 9.21.0 through 9.21.23 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-49844] Apache Log4j Vulnerability in NetApp Products
Apache Log4j versions 2.13.1 through 2.25.4 and version 2.26.0 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-60526] Java Platform Standard Edition Vulnerability in NetApp Products
Java SE versions 8u491 and 8u491-perf are susceptible to a vulnerability which when successfully exploited could allow a low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.
Medium [CVE-2026-47013 +5] July 2026 Java Platform Standard Edition 8u491 Vulnerabilities in NetApp Products
Java SE version 8u491 is susceptible to vulnerabilities that could allow an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details. Successful attacks of these vulnerabilities can result in the unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, unauthorized update, insert or delete access to some of Oracle Java SE accessible data or unauthorized read access to a subset of Oracle Java SE accessible data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.
Medium [CVE-2026-46917] Java Platform Standard Edition Vulnerability in NetApp Products
Java SE versions 11.0.31, 17.0.19, 21.0.11, 25.0.3, and 26.0.1 are susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Affected products: Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.
Medium [CVE-2026-15995] IBM Cognos Analytics Vulnerability in NetApp Products
The IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant used by authorized analysts to query report summaries and perform related tasks. Refer to the vendor advisory for additional information. Successful exploitation of this vulnerability could lead to disclosure of sensitive information or addition or modification of data. NetApp states there is no workaround available at this time.
Medium [CVE-2026-41854] Spring Framework Vulnerability in NetApp Products
Spring Framework versions 7.0.0 through 7.0.7 and 6.2.0 through 6.2.18 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-22007 +2] July 2026 IBM Db2 IBM Semeru Vulnerabilities in NetApp Products
IBM Db2 Client and Server versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are susceptible to vulnerabilities in IBM Semeru 21.0.10.0 and earlier. Successful exploitation of these vulnerabilities could lead to disclosure of sensitive information or Denial of Service (DoS). NetApp states there is no workaround available at this time.
Medium [CVE-2026-27448] pyOpenSSL Vulnerability in NetApp Products
pyOpenSSL versions 0.14 prior to 26.0.0 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data. Affected products: NetApp Data Classification. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-49426] FreeBSD Vulnerability in NetApp Products
All supported versions of FreeBSD are susceptible to a vulnerability which when successfully exploited could allow an attacker with the ability to debug a process to produce misleading audit trails. Successful exploitation of this vulnerability could lead to addition or modification of data. NetApp states there is no workaround available at this time.
Medium [CVE-2026-34478] Apache Log4j Vulnerability in NetApp Products
Apache Log4j versions 2.21.0 through 2.25.3 and 3.0.0-alpha1 through 3.0.0-beta3 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data. Affected products: Data Infrastructure Insights and Data Secure Storage Workload Security Agent. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-49421] FreeBSD Vulnerability in NetApp Products
All supported versions of FreeBSD are susceptible to a vulnerability which when successfully exploited could allow an attacker to delete files outside the intended directory tree. Successful exploitation of this vulnerability could lead to addition or modification of data. NetApp states there is no workaround available at this time.