NetApp Trident / Astra Vulnerabilities & Security Advisories
37 advisories tracked · NetApp Product Security Advisories (PSIRT) · 0 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published NetApp advisory that VulniPulse classified as Trident / Astra, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 7 critical, 24 high, 6 medium, 1 low.
Android app · Google Play
Monitor NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
NetApp Product Security Advisories (PSIRT)
Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.
Latest NetApp Trident / Astra advisories
Medium [CVE-2026-27145] Golang Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. Golang versions through 1.25.10 and 1.26.0 through 1.26.3 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data, Denial of Service (DoS). Affected products: Data Infrastructure Insights Telegraf Agent, NetApp Kubernetes Monitoring Operator, Trident, Trident Protect. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-27141] Golang Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. golang.org/x/net/http2 versions 0.50.0 prior to 0.51.0 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Astra Control Center - NetApp Kubernetes Monitoring Operator. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2026-27171] Zlib Vulnerability in NetApp Products
Multiple NetApp products incorporate zlib. Zlib versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Trident: Affected when NFS is not installed on the Kubernetes node. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time. Affected products named by the advisory: Active IQ Unified Manager for Linux; Active IQ Unified Manager for Microsoft Windows; Management Services for Element Software and NetApp HCI; NetApp LOADER 8.x.
Medium [CVE-2025-58181] Golang Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. Golang/x/crypto/ssh versions prior to 0.45.0 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Astra Control Center, Data Infrastructure Insights Telegraf Agent. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-47914] Golang.Org/X/Crypto Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. Org/X/Crypto. Successful exploitation of this vulnerability could lead to Denial of Service (DoS). Affected products: Astra Control Center. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
Medium [CVE-2025-4673] Golang Vulnerability in NetApp Products
Multiple NetApp products incorporate Golang. Golang versions prior to 1.23.10 and 1.24.0 prior to 1.24.4 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information. Successful exploitation of this vulnerability could lead to disclosure of sensitive information. Affected products: Astra Control Center, NetApp Console Agent, Trident, Trident Autosupport, Trident Protect. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.