---
id: CVE-2026-22063
title: CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
summary: >-
  The private keys of eight eMudhra intermediate CA certificates have been
  compromised. eMudhra revoked the eight affected intermediate certificates on
  October 18, 2026. While this is not a software vulnerability, CVE-2026-22063
  has been a…
severity: medium
cvss: 6
cvssVector: 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
vendor: NetApp
product: ONTAP 9
affected:
  - ontap_9 < 9.18.1
  - storagegrid_formerly_storagegrid_webscale <= 12.2.0
  - e-series_santricity_os_controller_software all versions
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T22:20:43.242Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-22063'
references:
  - url: 'https://security.netapp.com/advisory/NTAP-20261027-0001/'
tags:
  - cve.org
ingestedAt: '2026-10-27T22:58:58.459Z'
---

## Overview

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.

## Affected

- `ontap_9 < 9.18.1`
- `storagegrid_formerly_storagegrid_webscale <= 12.2.0`
- `e-series_santricity_os_controller_software all versions`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.