VULNERABILITY INTELLIGENCE

CVE-2026-22052

CVSS score5.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-03-05
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Description

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.

Weakness classification

  • CWE-209: Generation of Error Message Containing Sensitive Information

Primary references