What’s Vulnerable › Vulnerabilities
CVE-2026-22063: CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
- Severity: medium (CVSS 6.0 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-27 · updated 2026-10-28
Description
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Affected products
- E-Series SANtricity OS Controller Software 11.x: 0
- NetApp ONTAP 9: before 9.18.1 — fixed in 9.18.1
- NetApp StorageGRID: through 12.2.0
How to fix
Upgrade to a fixed version: NetApp ONTAP 9 9.18.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-22063 or the next vulnerability affects your stack