CVE-2026-22050

CWE-639 — Insecure Direct Object ReferenceCWE-8055 documents5 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 84.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Netapp Ontap 9Netapp Ontap
Timeline
PublishedJan 12
Latest updateFeb 14

Description

ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5netapp/ontap_99.16.1 — 9.16.1P9+1

Also affects: Ontap 9.16.1, 9.17.1

🔴Vulnerability Details

2
CVEList
CVE-2026-22050: ONTAP versions 9↗2026-01-12
▶
GHSA
GHSA-hxc4-9x7v-pg3w: ONTAP versions 9↗2026-01-12
▶

📋Vendor Advisories

1
Red Hat
kernel: ALSA: usb-audio: Prevent excessive number of frames↗2026-02-14
▶