Compromised Private Keys in eMudhra Intermediate CA Certificates Impacting NetApp Products
CVE-2026-22063

6MEDIUM

Key Information:

Vendor

Netapp

Status
Ontap 9
Storagegrid (formerly Storagegrid Webscale)
E-series Santricity Os Controller Software
Vendor
CVE Published:
27 October 2026

What is CVE-2026-22063?

The unauthorized exposure of private keys belonging to eight eMudhra intermediate CA certificates has raised security concerns across several NetApp products. eMudhra took immediate action by revoking the affected certificates on October 18, 2026. Users of impacted NetApp services should review their reliance on these certificates and consider potential risks associated with compromised cryptographic material.

Affected Version(s)

E-Series SANtricity OS Controller Software 0

ONTAP 9 0 < 9.18.1

StorageGRID (formerly StorageGRID Webscale) 0 <= 12.2.0

References

https://security.netapp.com/advisory/NTAP-20261027-0001/

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.