CVE-2021-26997: Netapp E-Series Santricity OS Controller

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks.

Affected products

• Netapp E-Series Santricity OS Controller: from 11.0.0, before 11.70.1 (fixed in 11.70.1)

Published 2021-06-11. Last modified 2026-06-17.