CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

Score

CVSS 4.0 8.2 High

Status

Deferred - security-alert@netapp.com

Published

2026-10-09

Last modified

2026-10-16

Weaknesses

CWE-215

Affected products

• Trident (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20261009-0026