CVE-2021-26998: Netapp Cloud Manager

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.

Affected products

• Netapp Cloud Manager: before 3.9.9 (fixed in 3.9.9)

Published 2021-08-06. Last modified 2026-06-17.