Linux Distros Unpatched Vulnerability : CVE-2026-103674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the...

CVE-2026-103674

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-103674 NetApp ONTAP special agent exposes password in process list

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-103674 NetApp ONTAP special agent exposes password in process list

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-103674

In Checkmk version 2.5.0 before 2.5.0p16 , the invocation of the NetApp ONTAP special agent with a login password in the command line causes the password to be visible in the process list while the agent is running. This vulnerability allows a local user on the Checkmk server to read the NetApp l...

EUVD-2026-118026

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

UBUNTU-CVE-2026-103674

Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is running. This affects both explicitly...

CVE-2026-22058: NETAPP StorageGRID (formerly StorageGRID Webscale): StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge…

StorageGRID formerly StorageGRID Webscale versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests...

CVE-2026-22060: NETAPP StorageGRID (formerly StorageGRID Webscale): All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated…

All versions of StorageGRID formerly StorageGRID Webscale in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid...

CVE-2026-22063

The private keys of eight eMudhra intermediate CA certificates were compromised, leading to their revocation on October 18, 2026. While not a software vulnerability, CVE-2026-22063 is used to track related changes across NetApp products . No specific exploits or detailed remediation steps are pro...

CVE-2026-22063 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp product...

CVE-2026-22063: NetApp: The private keys of eight eMudhra intermediate CA certificates have been compromised

The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp product...

NetApp ONTAP 9 security vulnerabilities

A security vulnerability exists in NetApp ONTAP versions prior to 9.18.1, NetApp StorageGRID formerly StorageGRID Webscale versions prior to 12.2.0, and NetApp E Series SANTRICITY OS Controller Software. This vulnerability stems from the leakage of private keys for eight eMudhra intermediate CA...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, thanos-operator-fips, prometheus-podman-exporter-fips, kubevirt-cdi-operator-fips, longhorn-instance-manager, cluster-autoscaler, crossplane-provider-azure-netapp, kubernetes-csi-external-snapshotter-fips, authservice, kubernetes-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, thanos-operator-fips, prometheus-podman-exporter-fips, kubevirt-cdi-operator-fips, longhorn-instance-manager, cluster-autoscaler, crossplane-provider-azure-netapp, kubernetes-csi-external-snapshotter-fips, authservice, kubernetes-fips,...

PT-2026-108736

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description When fdescfs4 is mounted in a jail using the "nodup" option, opening the '/dev/fd/N' endpoint returns a descriptor that fails to inherit the Capsicum capability rights or the FD RESOL...

PT-2026-108739

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists in the semop2 function where it releases the per-set lock and sleeps while waiting for a semaphore condition. Upon waking, the function uses a 15-bit sequence number...

PT-2026-108735

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An off-by-one bug exists in the code that searches for the inner record type in TLS 1.3, where the actual record type is embedded as the last non-zero byte of the decrypted payload. A...

PT-2026-108738

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description An issue exists where SCM RIGHTS file descriptor passing fails to preserve the FD RESOLVE BENEATH restriction during descriptor transfer. A process can bypass this restriction by...

PT-2026-108737

Name of the Vulnerable Software and Affected Versions NetApp Products affected versions not specified Description The renameat2 function fails to enforce FD RESOLVE BENEATH on its directory arguments. This allows a jailed process to rename a directory relative to a restricted descriptor and...