CVE-2026-22063

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

Score

CVSS 4.0 6.0 Medium

Status

Deferred - security-alert@netapp.com

Published

2026-10-27

Last modified

2026-10-28

Affected products

• E-series Santricity Os Controller Software (Netapp)
• Ontap 9 (Netapp)
• Storagegrid Formerly Storagegrid Webscale (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20261027-0001/