8.7Hoch
CVE-2026-22049
Beschreibung
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.
Schwachstellentyp (CWE):
CWE-288
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://security.netapp.com/advisory/NTAP-20260722-0001/ PatchVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*≥ 9.16.1 < 9.19.1