French agency warns of remote code execution flaws in NetApp ONTAP 9
France's national cyber agency CERT-FR issued a warning on 3 November 2026 about several security flaws in NetApp ONTAP 9, the operating software used in NetApp storage systems. The flaws could let a remote attacker run arbitrary code on affected systems. NetApp has published patched versions for each affected branch, and the advisory points users to NetApp's own security bulletin for the fixes.
This summary was generated by AI; the official source prevails.
What does it mean?
NetApp ONTAP is software that runs storage systems companies use to keep their data. If a company runs an older version, it should install the patched release for its branch, since the flaws could let an outsider take control of the system remotely.
Who is affected?
Organizations running affected NetApp ONTAP 9 storage systems and their IT administrators.