Changeflow GovPing Data Privacy & Cybersecurity NetApp Multiple Vulnerabilities Allow Data Conf...
Priority review Notice Added Final

NetApp Multiple Vulnerabilities Allow Data Confidentiality Breach

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR has published advisory CERTFR-2026-AVI-0476 identifying multiple vulnerabilities in NetApp ONTAP and StorageGRID products. Affected versions include ONTAP 9.13.x prior to 9.13.1P20, ONTAP 9.16.x prior to 9.16.1P12, StorageGRID 11.x prior to 11.9.0.13, and StorageGRID 12.x prior to 12.0.0.6. The vulnerabilities enable data confidentiality breaches and denial-of-service attacks. Organizations using these products should apply vendor patches referenced in NetApp security bulletins NTAP-20260420-0001 and NTAP-20250711-0004.

“De multiples vulnérabilités ont été découvertes dans les produits NetApp.”

— CERT-FR , verbatim from source
Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

GovPing monitors CERT-FR Security Advisories for new data privacy & cybersecurity regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 183 changes logged to date.

View original document View source feed page

What changed

CERT-FR published security advisory CERTFR-2026-AVI-0476 identifying multiple vulnerabilities in NetApp storage products (ONTAP and StorageGRID) that allow attackers to breach data confidentiality and cause denial of service. The affected versions span ONTAP 9.13.x and 9.16.x, and StorageGRID 11.x and 12.x. The advisory references two NetApp security bulletins and two CVEs (CVE-2025-4516 and CVE-2026-22051).

Organizations running NetApp ONTAP or StorageGRID systems should immediately verify their installed versions against the affected version ranges and apply the relevant patches from NetApp's security bulletins. Given the confidentiality breach risk, organizations handling sensitive data should prioritize patching and consider this advisory in their vulnerability management programs.

What to do next

  1. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs

Archived snapshot

Apr 22, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 22 avril 2026 N° CERTFR-2026-AVI-0476 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits NetApp

Gestion du document

| Référence | CERTFR-2026-AVI-0476 |
| Titre | Multiples vulnérabilités dans les produits NetApp |
| Date de la première version | 22 avril 2026 |
| Date de la dernière version | 22 avril 2026 |
| Source(s) | Bulletin de sécurité NetApp NTAP-20260420-0001 du 20 avril 2026
Bulletin de sécurité NetApp NTAP-20250711-0004 du 22 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à la confidentialité des données
  • Déni de service

Systèmes affectés

  • ONTAP versions 9.13.x antérieures à 9.13.1P20
  • ONTAP versions 9.16.x antérieures à 9.16.1P12
  • StorageGRID versions 11.x antérieures à 11.9.0.13
  • StorageGRID versions 12.x antérieures à 12.0.0.6

Résumé

De multiples vulnérabilités ont été découvertes dans les produits NetApp. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un déni de service.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 22 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Apache Kafka Allow Data Breach
Priority review Apr 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Linux Kernel Vulnerabilities in Ubuntu, Privilege Escalation and Data Breach Risk
Priority review Apr 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Atlassian Products Allow Remote Code Execution
Priority review Apr 22, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 22nd, 2026
Instrument
Notice
Branch
Executive
Source language
fr
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Technology companies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Patch management Data storage systems
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Data Privacy

Browse Categories

Agriculture & Food Safety 74 AI Regulation 3 Banking & Finance 427 Consumer Protection 90 Courts & Legal 417 Data Privacy & Cybersecurity 90 Defense & National Security 53 Education 60 Energy 101 Environment 160 Gaming 2 Government & Legislation 439 Healthcare 15 Healthcare & Life Sciences 386 Immigration 10 Insurance 80 Labor & Employment 146 Pharma & Drug Safety 21 Professional Licensing 8 Real Estate & Housing 82 Securities & Markets 158 Tax 82 Telecom & Technology 48 Trade & Sanctions 141 Transportation 91

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!