{"status":"success","advisory":{"_id":"6ae12020dd5255026dc6b435","kb_acknowledgements":null,"kb_affected_list":["Data Infrastructure Insights Acquisition Unit","Data Infrastructure Insights Telegraf Agent","Data Infrastructure Insights and Data Secure Storage Workload Security Agent","E-Series SANtricity OS Controller Software","NetApp Console Agent Container (e-series)","NetApp Console Agent Container (vector)","NetApp HCI Baseboard Management Controller (BMC) - H610S","ONTAP 9","StorageGRID (formerly StorageGRID Webscale)","Trident","Trident Autosupport"],"kb_bad_data":false,"kb_cve":["CVE-2026-22063"],"kb_exploitation":"Public","kb_fixes":[{"product":"NetApp HCI Baseboard Management Controller (BMC) - H610S","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2876227.html"}],"kb_impact":"Successful attackers could perform a Man-in-the-Middle attack. \r\n<br><br>\r\nONTAP 9:<br>\r\nThe “AAA Certificate Services” root certificate was preinstalled in versions prior to 9.18.1. ","kb_internal_notes":[{"burt":"","jira":"PSIRT-47306","product":"AFF BIOS - A700s"},{"burt":"","jira":"PSIRT-47305","product":"AFF Baseboard Management Controller (BMC) - A700s"},{"burt":"","jira":"PSIRT-47307","product":"AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70"},{"burt":"","jira":"PSIRT-47308","product":"AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50"},{"burt":"","jira":"PSIRT-47309","product":"AI Data Engine (AIDE)"},{"burt":"","jira":"PSIRT-47299","product":"Active IQ Config Advisor"},{"burt":"","jira":"PSIRT-47300","product":"Active IQ OneCollect"},{"burt":"","jira":"CAIQUM-9961","product":"Active IQ Unified Manager for Linux"},{"burt":"","jira":"CAIQUM-9962","product":"Active IQ Unified Manager for Microsoft Windows"},{"burt":"","jira":"CAIQUM-9963","product":"Active IQ Unified Manager for VMware vSphere"},{"burt":"","jira":"CONTAPEXT-4725","product":"Brocade Fabric Operating System Firmware"},{"burt":"","jira":"CONTAPEXT-4726","product":"Brocade SAN Navigator (SANnav)"},{"burt":"","jira":"CONTAP-826596","product":"Cloud Volumes ONTAP Mediator"},{"burt":"","jira":"ICI-20274","product":"Data Infrastructure Insights Acquisition Unit"},{"burt":"","jira":"ICI-20276","product":"Data Infrastructure Insights Telegraf Agent"},{"burt":"","jira":"ICI-20275","product":"Data Infrastructure Insights and Data Secure Storage Workload Security Agent"},{"burt":"","jira":"PSIRT-47313","product":"E-Series SANtricity OS Controller Software"},{"burt":"","jira":"PSIRT-47314","product":"E-Series SANtricity Unified Manager and Web Services Proxy"},{"burt":"","jira":"PSIRT-47322","product":"FAS/AFF BIOS - 8300/8700/A400/C400"},{"burt":"","jira":"PSIRT-47323","product":"FAS/AFF BIOS - A250/500f/C250"},{"burt":"","jira":"PSIRT-47324","product":"FAS/AFF BIOS - A300/8200/C190/A220/2720/2750/A150"},{"burt":"","jira":"PSIRT-47325","product":"FAS/AFF BIOS - A320"},{"burt":"","jira":"PSIRT-47326","product":"FAS/AFF BIOS - A800/C800"},{"burt":"","jira":"PSIRT-47327","product":"FAS/AFF BIOS - A900/9500"},{"burt":"","jira":"PSIRT-47315","product":"FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400"},{"burt":"","jira":"PSIRT-47316","product":"FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250"},{"burt":"","jira":"PSIRT-47317","product":"FAS/AFF Baseboard Management Controller (BMC) - A320"},{"burt":"","jira":"PSIRT-47318","product":"FAS/AFF Baseboard Management Controller (BMC) - A800/C800"},{"burt":"","jira":"PSIRT-47319","product":"FAS/AFF Baseboard Management Controller (BMC) - A900/9500"},{"burt":"","jira":"PSIRT-47320","product":"FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750"},{"burt":"","jira":"PSIRT-47321","product":"FAS/AFF Baseboard Management Controller (BMC) - FAS2820"},{"burt":"","jira":"PSIRT-47328","product":"FAS/AFF Service Processor - A300/8200"},{"burt":"","jira":"PSIRT-47329","product":"FAS/AFF Service Processor - A700/9000"},{"burt":"","jira":"PSIRT-47330","product":"Global File Cache"},{"burt":"","jira":"PSIRT-47332","product":"Management Services for Element Software and NetApp HCI"},{"burt":"","jira":"CMCCTB-197","product":"MetroCluster Tiebreaker"},{"burt":"","jira":"PSIRT-47333","product":"NetApp Console Agent"},{"burt":"","jira":"PSIRT-47334","product":"NetApp Console Agent Container (alert-service-client)"},{"burt":"","jira":"PSIRT-47335","product":"NetApp Console Agent Container (alertmanager)"},{"burt":"","jira":"PSIRT-47336","product":"NetApp Console Agent Container (audit)"},{"burt":"","jira":"PSIRT-47337","product":"NetApp Console Agent Container (cadvisor)"},{"burt":"","jira":"PSIRT-47338","product":"NetApp Console Agent Container (cbs)"},{"burt":"","jira":"PSIRT-47339","product":"NetApp Console Agent Container (cbs-backend)"},{"burt":"","jira":"PSIRT-47340","product":"NetApp Console Agent Container (certificates)"},{"burt":"","jira":"PSIRT-47341","product":"NetApp Console Agent Container (credentials)"},{"burt":"","jira":"PSIRT-47342","product":"NetApp Console Agent Container (credentials_v3)"},{"burt":"","jira":"PSIRT-47343","product":"NetApp Console Agent Container (cs_reports)"},{"burt":"","jira":"PSIRT-47344","product":"NetApp Console Agent Container (docker_occm)"},{"burt":"","jira":"PSIRT-47345","product":"NetApp Console Agent Container (dr_agent)"},{"burt":"","jira":"PSIRT-47346","product":"NetApp Console Agent Container (e-series)"},{"burt":"","jira":"PSIRT-47347","product":"NetApp Console Agent Container (harvest)"},{"burt":"","jira":"PSIRT-47348","product":"NetApp Console Agent Container (health-checker)"},{"burt":"","jira":"PSIRT-47349","product":"NetApp Console Agent Container (message-poller)"},{"burt":"","jira":"PSIRT-47350","product":"NetApp Console Agent Container (mysql)"},{"burt":"","jira":"PSIRT-47351","product":"NetApp Console Agent Container (node-exporter)"},{"burt":"","jira":"PSIRT-47352","product":"NetApp Console Agent Container (occmauth)"},{"burt":"","jira":"PSIRT-47353","product":"NetApp Console Agent Container (prometheus)"},{"burt":"","jira":"PSIRT-47354","product":"NetApp Console Agent Container (protocol-proxy)"},{"burt":"","jira":"PSIRT-47355","product":"NetApp Console Agent Container (sccore)"},{"burt":"","jira":"PSIRT-47356","product":"NetApp Console Agent Container (snapcenter)"},{"burt":"","jira":"PSIRT-47357","product":"NetApp Console Agent Container (squid)"},{"burt":"","jira":"PSIRT-47358","product":"NetApp Console Agent Container (static-file-server)"},{"burt":"","jira":"PSIRT-47359","product":"NetApp Console Agent Container (storage-management)"},{"burt":"","jira":"PSIRT-47360","product":"NetApp Console Agent Container (storage_services)"},{"burt":"","jira":"PSIRT-47361","product":"NetApp Console Agent Container (tiering)"},{"burt":"","jira":"PSIRT-47362","product":"NetApp Console Agent Container (traefik)"},{"burt":"","jira":"PSIRT-47363","product":"NetApp Console Agent Container (vault)"},{"burt":"","jira":"PSIRT-47364","product":"NetApp Console Agent Container (vault-controller)"},{"burt":"","jira":"PSIRT-47365","product":"NetApp Console Agent Container (vector)"},{"burt":"","jira":"PSIRT-47366","product":"NetApp Console Agent Container (vmservice_storage)"},{"burt":"","jira":"PSIRT-47367","product":"NetApp Console Agent OVA"},{"burt":"","jira":"PSIRT-47369","product":"NetApp DataOps Toolkit"},{"burt":"","jira":"PSIRT-47371","product":"NetApp HCI Baseboard Management Controller (BMC) - H610S"},{"burt":"","jira":"PSIRT-47372","product":"NetApp HCI Storage Node BIOS"},{"burt":"","jira":"PSIRT-47373","product":"NetApp LOADER 8.x"},{"burt":"","jira":"CNMSDK-239","product":"NetApp Manageability SDK"},{"burt":"","jira":"PSIRT-47375","product":"NetApp SMI-S Provider"},{"burt":"","jira":"PSIRT-47376","product":"NetApp SolidFire & HCI Management Node"},{"burt":"","jira":"PSIRT-47331","product":"NetApp SolidFire & HCI Storage Node (Element Software)"},{"burt":"","jira":"CXCP-1586","product":"NetApp XCP NFS"},{"burt":"","jira":"CXCP-1587","product":"NetApp XCP SMB"},{"burt":"","jira":"CONTAP-826627","product":"ONTAP 9"},{"burt":"","jira":"CAVSHIM-400","product":"ONTAP Antivirus Connector"},{"burt":"","jira":"COMS-1407","product":"ONTAP Mediator"},{"burt":"","jira":"CDEPLOY-6074","product":"ONTAP Select Deploy administration utility"},{"burt":"","jira":"PSIRT-47378","product":"ONTAP tools for VMware vSphere 10"},{"burt":"","jira":"ICI-20236","product":"OnCommand Insight"},{"burt":"","jira":"CSNAPC-12374","product":"SnapCenter"},{"burt":"","jira":"CXPLAT-2654","product":"SnapCenter Plug-in for VMware vSphere"},{"burt":"","jira":"PSIRT-47380","product":"StorageGRID (formerly StorageGRID Webscale)"},{"burt":"","jira":"PSIRT-47381","product":"StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000"},{"burt":"","jira":"PSIRT-47382","product":"StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100"},{"burt":"","jira":"PSIRT-47383","product":"StorageGRID Baseboard Management Controller (BMC) - SG6260/SGF6212/SG120/SG1200"},{"burt":"","jira":"PSIRT-47384","product":"StorageGRID Baseboard Management Controller - (BMC) SG5812/SG5860"},{"burt":"","jira":"CONTAP-826602","product":"System Manager 9.x"},{"burt":"","jira":"PSIRT-47385","product":"Trident"},{"burt":"","jira":"PSIRT-47386","product":"Trident Autosupport"}],"kb_investigating_list":["AFF BIOS - A700s","AFF Baseboard Management Controller (BMC) - A700s","AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70","AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50","AI Data Engine (AIDE)","Active IQ Config Advisor","Active IQ OneCollect","Active IQ Unified Manager for Linux","Active IQ Unified Manager for Microsoft Windows","Active IQ Unified Manager for VMware vSphere","Brocade Fabric Operating System Firmware","Brocade SAN Navigator (SANnav)","Cloud Volumes ONTAP Mediator","FAS/AFF BIOS - 8300/8700/A400/C400","FAS/AFF BIOS - A250/500f/C250","FAS/AFF BIOS - A320","FAS/AFF BIOS - A800/C800","FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250","FAS/AFF Baseboard Management Controller (BMC) - A320","FAS/AFF Baseboard Management Controller (BMC) - A800/C800","FAS/AFF Baseboard Management Controller (BMC) - A900/9500","FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750","FAS/AFF Baseboard Management Controller (BMC) - FAS2820","FAS/AFF Service Processor - A300/8200","FAS/AFF Service Processor - A700/9000","Global File Cache","Management Services for Element Software and NetApp HCI","MetroCluster Tiebreaker","NetApp Console Agent","NetApp Console Agent Container (alert-service-client)","NetApp Console Agent Container (alertmanager)","NetApp Console Agent Container (audit)","NetApp Console Agent Container (cadvisor)","NetApp Console Agent Container (cbs)","NetApp Console Agent Container (cbs-backend)","NetApp Console Agent Container (certificates)","NetApp Console Agent Container (credentials)","NetApp Console Agent Container (credentials_v3)","NetApp Console Agent Container (cs_reports)","NetApp Console Agent Container (docker_occm)","NetApp Console Agent Container (dr_agent)","NetApp Console Agent Container (harvest)","NetApp Console Agent Container (health-checker)","NetApp Console Agent Container (message-poller)","NetApp Console Agent Container (mysql)","NetApp Console Agent Container (node-exporter)","NetApp Console Agent Container (occmauth)","NetApp Console Agent Container (prometheus)","NetApp Console Agent Container (protocol-proxy)","NetApp Console Agent Container (sccore)","NetApp Console Agent Container (snapcenter)","NetApp Console Agent Container (squid)","NetApp Console Agent Container (static-file-server)","NetApp Console Agent Container (storage-management)","NetApp Console Agent Container (storage_services)","NetApp Console Agent Container (tiering)","NetApp Console Agent Container (traefik)","NetApp Console Agent Container (vault)","NetApp Console Agent Container (vault-controller)","NetApp Console Agent Container (vmservice_storage)","NetApp Console Agent OVA","NetApp DataOps Toolkit","NetApp HCI Storage Node BIOS","NetApp Manageability SDK","NetApp SMI-S Provider","NetApp SolidFire & HCI Management Node","NetApp SolidFire & HCI Storage Node (Element Software)","NetApp XCP NFS","NetApp XCP SMB","ONTAP Select Deploy administration utility","ONTAP tools for VMware vSphere 10","OnCommand Insight","SnapCenter","SnapCenter Plug-in for VMware vSphere"],"kb_num":"9010000","kb_ref":["https://emudhra.we-have-a-problem.com/","https://emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca","https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0050"],"kb_rev_history":[{"comment":"Initial Public Release","date":"20261027","version":"1.0"},{"comment":"Data Infrastructure Insights Telegraf Agent, Data Infrastructure Insights and Data Secure Storage Workload Security Agent and Data Infrastructure Insights Acquisition Unit moved to Products Under Investigation, FAS/AFF BIOS - A900/9500 moved to Products Not Affected","date":"20261028","version":"2.0"},{"comment":"Trident, Trident Autosupport, NetApp Console Agent Container (vector) and NetApp Console Agent Container (e-series) moved to Affected Products, FAS/AFF BIOS - A300/8200/C190/A220/2720/2750/A150 and NetApp LOADER 8.x moved to Products Not Affected","date":"20261028","version":"3.0"},{"comment":"Data Infrastructure Insights Acquisition Unit, Data Infrastructure Insights and Data Secure Storage Workload Security Agent and Data Infrastructure Insights Telegraf Agent moved to Affected Products, E-Series SANtricity Unified Manager and Web Services Proxy moved to Products Not Affected","date":"20261029","version":"4.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2026-22063":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},"kb_scoring_calc":[{"cve_id":"CVE-2026-22063","range":"MEDIUM","score":6.0,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"kb_status":"Interim","kb_summary":"The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.\r\n\r\n","kb_title":"CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products","kb_unaffected_list":["AFF/ASA/FAS BIOS - A1K/A90/A70/C80/FAS90/FAS70","AFF/ASA/FAS BIOS - A50/A30/A20/C60/C30/FAS50","AIDE Langchain Retriever","AIDE MCP Server","ATTO FibreBridge - 7600N","Active IQ mobile app","Astra Control Provisioner","E-Series BIOS","E-Series SANtricity Unified Manager and Web Services Proxy","Element .NET SDK","Element HealthTools","Element JAVA SDK","Element Plug-in for vCenter Server","Element Powershell Tools","Element Python SDK","FAS/AFF BIOS - 2820","FAS/AFF BIOS - A300/8200/C190/A220/2720/2750/A150","FAS/AFF BIOS - A700/9000","FAS/AFF BIOS - A900/9500","IOM12 SAS Disk Shelf Firmware","IOM12B SAS Disk Shelf Firmware","IOM12C SAS Disk Shelf Firmware","IOM12E SAS Disk Shelf Firmware","IOM12F SAS Disk Shelf Firmware","IOM12G SAS Disk Shelf Firmware","MetroCluster DataCollector","Multipath I/O (SANtricity DSM for Windows MPIO)","NetApp Console Agent Container (adc)","NetApp Console Agent Container (cbs_catalog)","NetApp Console Agent Container (cloud_storage)","NetApp Console Agent Container (compliance)","NetApp Console Agent Container (hypervisorcontrol)","NetApp Console Agent Container (ontap-proxy)","NetApp Console Agent Container (ransomware-protection)","NetApp Console Agent Container (scs_cloud)","NetApp Console Agent Container (tp-proxy)","NetApp Console Agent Container (vmcontrol)","NetApp Console Agent Container (vmservice_controlplane)","NetApp Data Classification","NetApp E-Series Host Collection","NetApp E-Series SANtricity Collection","NetApp Kubernetes Monitoring Operator","NetApp LOADER 8.x","NetApp NFS Plug-in for VMware VAAI","NetApp ONTAP PowerShell Toolkit (PSTK)","NetApp Shift Toolkit","NetApp SolidFire Plug-in for vRealize Orchestrator (SolidFire vRO)","NetAppDocs","ONTAP Antivirus Connector","ONTAP Mediator","RcfFileGenerator for MetroCluster IP","SAN Host Utilities for Linux","SAN Host Utilities for Windows","SANtricity Storage Plugin for vCenter","SRA Plugin for Linux","SRA Plugin for Windows","SnapGathers","SolidFire Storage Replication Adapter","Storage Manager for ProxMox","StorageGRID BIOS SG1000/SG100/SG1100/SG110","StorageGRID BIOS SG5660/SG5612/SG5760/SG5712","StorageGRID BIOS SG5812/SG5860","StorageGRID BIOS SG6060/SGF6024/SGF6112/SG6160","StorageGRID BIOS SG6260/SGF6212/SG120/SG1200","StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000","StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100","StorageGRID Baseboard Management Controller (BMC) - SG6260/SGF6212/SG120/SG1200","StorageGRID Baseboard Management Controller - (BMC) SG5812/SG5860","System Manager 9.x","Terraform Provider for ONTAP","Trident Protect","Trident Protect Connector","Upgrade Health Checker"],"kb_workarounds":"ONTAP 9:<br>\r\nUninstall the “AAA Certificate Services” certificate using the \"security certificate delete\" command at the advanced privilege level. This command can also be used to uninstall any impacted certificates end users may have explicitly installed.\r\n<br><br>\r\nStorageGRID (formerly StorageGRID Webscale):<br>\r\n<a href=\"https://kb.netapp.com/hybrid/SGRID/Grid_Tenant_Manager_Issues/CSG-28116\">https://kb.netapp.com/hybrid/SGRID/Grid_Tenant_Manager_Issues/CSG-28116</a>\r\n","ntap_advisory_id":"NTAP-20261027-0001","adv_id":"ntap-20261027-0001","published_date":"2026-10-27T00:00:00","updated_date":"2026-10-29T00:00:00","inserted_date":"2026-10-29T21:17:16.677000","modified_date":null}}