8.7
High
CVE-2026-22049 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a…
Description
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ONTAP 9 9.16 | 9.16.1 → < 9.19.1 | 9.19.1 |
References
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of ONTAP 9
The 8 CVEs of ONTAP 9 →
CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
6.0
Medium
CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability
5.3
Medium
CVE-2026-22050
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to…
6.9
Medium
CVE-2024-21985
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability…
7.6
High