NetApp ONTAP 9.16.1+ WebAuthn MFA RP ID Bypass
CVE-2026-22049 Published on July 22, 2026

ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.

NVD

Vulnerability Analysis

CVE-2026-22049 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE

Weakness Type

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.


Products Associated with CVE-2026-22049

Want to know whenever a new CVE is published for NetApp Ontap 9? stack.watch will email you.

NetApp Ontap 9
 

Affected Versions

NETAPP ONTAP 9:

Exploit Probability

EPSS
0.29%
Percentile
20.86%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.