NetApp Data ONTAP: Schwachstelle ermöglicht Denial of Service
Affects Bundesamt für Sicherheit in der Informationstechnik NetAppSource GCVE Database
Not known to be exploited.
Data as of 27 Oct 2026, 03:48 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 28 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik NetApp | Affected
| Fixed in– |
AI-suggested
Monitor official NetApp communications for updates and apply patches when released.
Description
A vulnerability in NetApp Data ONTAP, the operating system for NetApp storage products, has been identified that allows for a denial of service condition. The affected versions include 9.17.1 and later. No CVSS score or detailed technical information is provided. There is no indication of known exploits in the wild or available patches at this time.
References
- wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2922.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2922 (opens in a new tab)
- security.netapp.com/advisory/NTAP-20251224-0014 (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-May/025953.html (opens in a new tab)