Description
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETAPP | ONTAP 9 | 9.16.1 – < 9.19.1 | 9.19.1 |
Advisories 1
- WID-SEC-2026-2475 NetApp Data ONTAP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jul 22, 2026