CVE-2021-26996: Netapp E-Series Santricity OS Controller

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks.

Affected products

• Netapp E-Series Santricity OS Controller: from 11.0.0, before 11.70.1 (fixed in 11.70.1)

Published 2021-06-11. Last modified 2026-06-17.