CVE-2026-22049

NETAPP / ONTAP 9 PUBLISHED

Description (CNA)

ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.

Affected (CNA)

Vendor / product	Versions
NETAPP / ONTAP 9	affected 9.16.1 before 9.19.1

CWE

No CWE identifiers supplied.

References

https://security.netapp.com/advisory/NTAP-20260722-0001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.