5.3
Medium
CVE-2026-22052 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability
Description
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ONTAP 9 | Versions not published |
References
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of ONTAP 9
The 8 CVEs of ONTAP 9 →
CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
6.0
Medium
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a…
8.7
High
CVE-2026-22050
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to…
6.9
Medium
CVE-2024-21985
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability…
7.6
High