NetApp NetApp tools & integrations Vulnerabilities & Security Advisories
8 advisories tracked · NetApp Product Security Advisories (PSIRT) · 0 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published NetApp advisory that VulniPulse classified as NetApp tools & integrations, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 4 high, 3 medium.
Android app · Google Play
Monitor NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Source
NetApp Product Security Advisories (PSIRT)
Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.
Latest NetApp NetApp tools & integrations advisories
Medium [CVE-2026-27145] Golang Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. Golang versions through 1.25.10 and 1.26.0 through 1.26.3 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data, Denial of Service (DoS). Affected products: Data Infrastructure Insights Telegraf Agent, NetApp Kubernetes Monitoring Operator, Trident, Trident Protect. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-22795] OpenSSL Vulnerability in NetApp Products
Multiple NetApp products incorporate OpenSSL. OpenSSL versions 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1. are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). NetApp Manageability SDK: OpenSSL was removed in 9.8P8. Affected products: Brocade SAN Navigator (SANnav), Management Services for Element Software and NetApp HCI, NetApp Console Agent Container (cbs-backend), NetApp HCI Baseboard Management Controller (BMC) - H610S, NetApp LOADER 8.x, ONTAP 9. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-11187] OpenSSL Vulnerability in NetApp Products
Multiple NetApp products incorporate OpenSSL. OpenSSL versions 3.6, 3.5 and 3.4 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). ONTAP 9: Affected only in 9.18.1. NetApp Manageability SDK: OpenSSL was removed in 9.8P8. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time. Affected products named by the advisory: Brocade SAN Navigator (SANnav); Management Services for Element Software and NetApp HCI; NetApp HCI Baseboard Management Controller (BMC) - H610S; NetApp LOADER 8.x.