CVE-2021-26989: Netapp Data Ontap

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.

Affected products

• Netapp Data Ontap: version 9.3.0 only; version 9.5.0 only; version 9.6.0 only; version 9.7.0 only; version 9.8.0 only

Published 2021-03-04. Last modified 2026-06-17.