{"schema":"threatline.record/2","record":{"id":"CVE-2026-22063","aliases":[],"summary":"CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products","details":"The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to track relevant changes in impacted NetApp products.","categories":["Unclassified"],"product":"ONTAP 9","vendor":"NetApp","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22063","source_modified_at":"2026-10-27T22:20:43.242Z","fetched_at":"2026-10-28T01:10:53.534015Z","product":"ONTAP 9","vendor":"NetApp","versions":[{"status":"affected","version":"0","lessThan":"9.18.1","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22063","source_modified_at":"2026-10-27T22:20:43.242Z","fetched_at":"2026-10-28T01:10:53.534015Z","product":"StorageGRID (formerly StorageGRID Webscale)","vendor":"NetApp","versions":[{"status":"affected","version":"0","lessThanOrEqual":"12.2.0","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22063","source_modified_at":"2026-10-27T22:20:43.242Z","fetched_at":"2026-10-28T01:10:53.534015Z","product":"E-Series SANtricity OS Controller Software","vendor":"NetApp","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22063","source_modified_at":"2026-10-27T22:20:43.242Z","fetched_at":"2026-10-28T01:10:53.534015Z","package":{"name":"ONTAP 9","ecosystem":null},"version":"9.18.1","basis":"first unaffected version stated in the CVE record"}],"cvss":6,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T22:20:43.242Z","modified_at":"2026-10-27T22:20:43.242Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-22063","fetched_at":"2026-10-28T01:10:53.534015Z","source_modified_at":"2026-10-27T22:20:43.242Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://security.netapp.com/advisory/NTAP-20261027-0001/"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T22:20:43.242Z","content_hash":"d1d8b9e295a7ee0b8f02eafa91560c9e788a2a4cc0b10f1bc6e845b2e2c811a7"}}