NetApp CA Compromise: eMudhra Private Key Breach
CVE-2026-22063 Published on October 27, 2026

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

NVD

Vulnerability Analysis

CVE-2026-22063 can be exploited with network access. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
PASSIVE

Products Associated with CVE-2026-22063

Want to know whenever a new CVE is published for NetApp products? stack.watch will email you.

NetApp Ontap 9
 
NetApp Storagegrid
 
NetApp E Series Santricity Os Controller
 

Affected Versions

NetApp ONTAP 9: NetApp StorageGRID (formerly StorageGRID Webscale): NetApp E-Series SANtricity OS Controller Software: