8.7Yüksek
CVE-2026-22049
Açıklama
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.
Zayıflık türü (CWE):
CWE-288
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://security.netapp.com/advisory/NTAP-20260722-0001/ PatchVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*≥ 9.16.1 < 9.19.1