Vulnerability Database

320,453

Total vulnerabilities in the database

CVE-2026-22050

ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.

  • Published: Jan 12, 2026
  • Updated: Jan 23, 2026
  • CVE: CVE-2026-22050
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
netapp / ontap 9.16.1 9.16.1.x
netapp / ontap 9.16.1-p1 9.16.1-p1.x
netapp / ontap 9.16.1-p2 9.16.1-p2.x
netapp / ontap 9.16.1-p3 9.16.1-p3.x
netapp / ontap 9.16.1-p4 9.16.1-p4.x
netapp / ontap 9.16.1-p5 9.16.1-p5.x
netapp / ontap 9.16.1-p6 9.16.1-p6.x
netapp / ontap 9.16.1-p7 9.16.1-p7.x
netapp / ontap 9.16.1-p8 9.16.1-p8.x
netapp / ontap 9.17.1 9.17.1.x
netapp / ontap 9.17.1-p1 9.17.1-p1.x