CVE-2025-26512

SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - security-alert@netapp.com

Published

2025-03-24

Last modified

2026-02-26

Weaknesses

CWE-266

Affected products

• Snapcenter (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20250324-0001
• https://security.netapp.com/advisory/ntap-20250324-0001/