VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 5, 2026· Updated Jun 17, 2026

CVE-2026-22052

CVE-2026-22052

Description

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.

Affected products

4
  • NetApp/ONTAP4 versions
    cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*range: >=9.12.1
    • cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*
    • (no CPE)range: >=9.12.1
    • (no CPE)range: 9.12.1 and higher

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.