CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
Impact
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.
Source excerpt · netappAffected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
NetApp · ONTAP 9
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 0 to before 9.18.1 | affected |
NetApp · StorageGRID (formerly StorageGRID Webscale)
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 0 through 12.2.0 (inclusive) | affected |
NetApp · E-Series SANtricity OS Controller Software
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 0 | affected |
Original source description
The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.