CVE-2021-26988: Netapp Data Ontap

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs.

Affected products

• Netapp Data Ontap: version 9.3.0 only; version 9.5.0 only; version 9.6.0 only; version 9.7.0 only; version 9.8.0 only

Published 2021-03-04. Last modified 2026-06-17.