Summary: A high-severity privilege escalation vulnerability (CVE-2025-26512) has been identified in NetApp SnapCenter, impacting versions prior to 6.0.1P1 and 6.1P1. NetApp is urging users to update their systems immediately to prevent unauthorized access and potential exploitation. Software fixes are available via the NetApp Support website.
Affected: NetApp SnapCenter users
Keypoints :
- Vulnerability CVE-2025-26512 has a CVSS score of 9.9, indicating its severity.
- Authenticated SnapCenter users may escalate privileges on remote systems with vulnerable SnapCenter plug-ins.
- Users are advised to download and apply security updates from the NetApp Support website promptly.
Source: https://securityonline.info/netapp-snapcenter-users-at-risk-cvss-9-9-privilege-escalation-alert/