Critical severity9.9NVD Advisory· Published Mar 24, 2025· Updated Jun 17, 2026
CVE-2025-26512
CVE-2025-26512
Description
SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.
Affected products
5cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*range: <6.0.1
- cpe:2.3:a:netapp:snapcenter:6.0.1:-:*:*:*:*:*:*
- cpe:2.3:a:netapp:snapcenter:6.1:-:*:*:*:*:*:*
- (no CPE)range: <6.0.1P1, <6.1P1
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- security.netapp.com/advisory/NTAP-20250324-0001nvdVendor Advisory
- security.netapp.com/advisory/ntap-20250324-0001/nvdVendor Advisory
News mentions
0No linked articles in our index yet.