NetApp AFF / ASA / FAS Vulnerabilities & Security Advisories
157 advisories tracked · NetApp Product Security Advisories (PSIRT) · 1 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published NetApp advisory that VulniPulse classified as AFF / ASA / FAS, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 7 critical, 49 high, 95 medium, 7 low.
Android app · Google Play
Monitor NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
NetApp Product Security Advisories (PSIRT)
Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.
Latest NetApp AFF / ASA / FAS advisories
Medium [CVE-2025-22105] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 5.15-rc1 through 6.14.1 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23255] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 2.6.12-rc2 through 6.18.9 and 6.19-rc1 through 6.19-rc8 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S, ONTAP Select Deploy administration utility. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-37864] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 5.18-rc1 through 6.6.87, 6.7-rc1 through 6.12.24 and 6.13-rc1 through 6.14.3 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-68823] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 6.0-rc1 through 6.18.2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-39997] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 6.15.3 through 6.15.11, 6.16-rc1 through 6.16.10 and 6.17-rc1 through 6.17 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2024-53221] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 5.6 through 6.11.10 and 6.12 through 6.12.1 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-56404] Libexpat Vulnerability in NetApp Products
Libexpat versions through 2.8.1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-56408] Libexpat Vulnerability in NetApp Products
Libexpat versions 2.2.2 through 2.8.1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-56131] Libexpat Vulnerability in NetApp Products
Libexpat versions 1.95.8 through 1.95.8 and 2.0.0 through 2.8.1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-76957] Libexpat Vulnerability in NetApp Products
Libexpat versions through 2.8.3 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23310] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 5.15-rc1 through 6.6.129, 6.7-rc1 through 6.12.76,6.13-rc1 through 6.18.16, 6.19-rc1 through 6.19.6, and 6.20-rc1 through 7.0-rc2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23468] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions through 6.18.19, 6.19-rc1 through 6.19.9, and 6.20-rc1 through 7.0-rc4 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23442] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 4.10-rc1 through 6.19.9 and 6.20-rc1 through 7.0-rc4 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23389] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 4.17-rc1 through 6.19.6 and 6.20-rc1 through 7.0-rc2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23444] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 3.13-rc1 prior to 6.18.19 and 6.19-rc1 prior to 6.19.10 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-23399] Linux Kernel Vulnerability in NetApp Products
Linux kernel versions 5.11-rc1 prior to 6.12.78, 6.13-rc1 prior to 6.18.20, 6.19-rc1 prior to 6.19.10 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-43618] Rsync Vulnerability in NetApp Products
Rsync versions prior to 3.4.3 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-43617] Rsync Vulnerability in NetApp Products
Rsync versions through 3.4.2 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data. Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-41989] Libgcrypt Vulnerability in NetApp Products
Libgcrypt versions through 1.8.12, 1.11 through 1.11.2, 1.12.0 through 1.12.1, and 1.9 through 1.10.3 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-43620] Rsync Vulnerability in NetApp Products
Rsync versions prior to 3.4.3 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: NetApp HCI Baseboard Management Controller (BMC) - H610S. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.