9.9

CVE-2025-26512

Medienbericht

CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter

SnapCenter versions prior to 
6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an 
authenticated SnapCenter Server user to become an admin user on a remote
 system where a SnapCenter plug-in has been installed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Snapcenter Version < 6.0.1
Netapp ≫ Snapcenter Version6.0.1 Update-
Netapp ≫ Snapcenter Version6.1 Update-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.186
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security-alert@netapp.com 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.