PT-2026-2286 · Netapp · Ontap

Michele Damico · Published 2026-01-12 · Updated 2026-01-12 · CVE-2026-22050

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ONTAP versions 9.16.1 through 9.16.1P9 ONTAP versions 9.17.1 through 9.17.1P2

Description ONTAP systems with snapshot locking enabled may allow a privileged remote attacker to modify the snapshot expiry time to none.

Recommendations Update to ONTAP version 9.16.1P9 or later. Update to ONTAP version 9.17.1P2 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-22050

Affected Products

Ontap

References · 5

• https://security.netapp.com/advisory/NTAP-20260112-0001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22050 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22050 · Security Note
• https://twitter.com/VulmonFeeds/status/2010806815194304887 · Twitter Post
• https://twitter.com/CVEnew/status/2010770440604570085 · Twitter Post