CVE-2021-26995: Netapp E-Series Santricity OS Controller

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code.

Affected products

• Netapp E-Series Santricity OS Controller: from 11.0.0, before 11.70.1 (fixed in 11.70.1)

Published 2021-06-11. Last modified 2026-06-17.