CVE-2026-22049

Description

ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.

References

• https://security.netapp.com/advisory/NTAP-20260722-0001/