SnapCenter Security Flaw Rated Critical—NetApp Urges Immediate Patch

Summary: A critical security vulnerability (CVE-2025-26512) has been discovered in NetApp’s SnapCenter software, allowing authenticated users to escalate privileges and gain unauthorized administrative access. This flaw affects SnapCenter versions prior to 6.0.1P1 and 6.1P1, with a CVSS score of 9.9. While no public exploitation has been detected, organizations are urged to update to the latest versions to mitigate risks.

Affected: NetApp SnapCenter software

Keypoints :

• Privilege escalation vulnerability affects versions before 6.0.1P1 and 6.1P1.
• Authenticated users can gain unauthorized control over remote systems.
• Potential impacts include data breaches, system disruptions, and compromise of IT infrastructure.
• Organizations are strongly advised to upgrade to the patched versions to ensure security.
• The vulnerability has a critical CVSS score of 9.9, indicating high risk.