medium4.3
CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability.
Impact
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Ontap | from 9.12.1 Version 9 |