CVE-2026-22050

ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - security-alert@netapp.com

Published

2026-01-12

Last modified

2026-01-13

Weaknesses

CWE-639

Affected products

• Ontap (Netapp)
• Ontap 9 (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20260112-0001