NetApp Security Advisories & CVEs

1 advisories tracked · NetApp Product Security Advisories (PSIRT) · direct feeds checked every minute; rate-limited backstops use a safe source cadence

Check if your NetApp device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in NetApp's recent advisories.

Official source

NetApp Product Security Advisories (PSIRT)

Polled through NetApp Product Security's official advisory API. It supplies the canonical NTAP advisory ID, NetApp-calculated CVSS, affected and investigating products, remediation releases, workarounds and revision dates without relying on a third-party keyword search.

Visit NetApp security advisories

Latest NetApp advisories

All severities critical high medium low

All platforms ONTAP / System Manager AFF / ASA / FAS StorageGRID E-Series / SANtricity SolidFire / Element / HCI SnapCenter Active IQ Unified Manager BlueXP / NetApp Console Trident / Astra ONTAP tools for VMware OnCommand / Data Infrastructure Insights Brocade SANnav / Fabric OS NetApp tools & integrations

Low3.7NetApp

CVE-2026-42770 OpenSSL Vulnerability in NetApp Products

Multiple NetApp products incorporate OpenSSL. OpenSSL versions 4.0, 3.6, 3.5, 3.4, and 3.0 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information. Successful exploitation of this vulnerability could lead to disclosure of sensitive information. Affected products: FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400, NetApp Console Agent Container (adc), NetApp Console Agent Container (cbs), NetApp Console Agent Container (cbs-backend), ONTAP Select Deploy administration utility. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.

CVE-2026-42770

ONTAPAFF / ASA / FASBlueXP / NetApp ConsoleONTAP Select

Jun 17, 2026

← All vendors