Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-22063

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
netapp

Description

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetApp ONTAP 9

Default version status: unaffected

  • 0 to < 9.18.1affected

NetApp StorageGRID (formerly StorageGRID Webscale)

Default version status: unaffected

  • 0 to ≤ 12.2.0affected

NetApp E-Series SANtricity OS Controller Software

Default version status: unaffected

  • 0affected

References