CVE-2025-26512

published 2025-03-24

CVE-2025-26512: SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin…

critical 9.9 CVSS 3.1

AV N AC L PR L UI N S C C H I H A H

SnapCenter versions prior to
6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an
authenticated SnapCenter Server user to become an admin user on a remote
system where a SnapCenter plug-in has been installed.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
netapp	snapcenter	< 6.0.1P1	6.0.1P1
netapp	snapcenter	< 6.1P1	6.1P1
netapp	snapcenter	< 6.0.1	6.0.1
netapp	snapcenter	—	—
netapp	snapcenter	—	—

CWE-266