A critical vulnerability, CVE-2025-26512, in NetApp's SnapCenter software has been identified, allowing attackers with authenticated access to escalate privileges and gain unauthorized administrative control. This flaw can result in the alteration or deletion of sensitive data and may disrupt operations, posing severe risks to the IT infrastructure. Customers are urged to apply the latest patches, SnapCenter 6.0.1P1 and 6.1P1, to mitigate this risk. The CVSS score is 9.9, indicating the severity and potential for significant impact if exploited.
Source: https://thecyberexpress.com/netapp-snapcenter-vulnerability-cve-2025-26512/
"id": "net116032725",
"linkid": "netapp",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"