6.0Media

CVE-2026-22063CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

NetApp ONTAP 9; NetApp StorageGRID (formerly StorageGRID Webscale); NetApp E-Series SANtricity OS Controller Software Publicada: (hace 18 días)

Descripción

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

Debilidad (CWE): CWE-327

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
NetApp E-Series SANtricity OS Controller Software 0
NetApp ONTAP 9 < 9.18.1
NetApp StorageGRID (formerly StorageGRID Webscale) ≤ 12.2.0

Referencias y parches