PHP Vulnerability Responses by Company

NetApp

Global cloud / infrastructure
Aliases / services
NetApp / NetApp Inc. / ONTAP / netapp.com
Official website
https://www.netapp.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
ONTAP mitigation guidance available
Response information checked
2026-10-24 Rechecked: 2026-10-27

Storage and data management products.

NetApp confirms CVE-2026-109618 affects ONTAP 9. The October 22 advisory lists no fixed release and describes mitigations including disabling web services and SAML pre-authentication.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

Select the official procedure after checking effects on System Manager, REST and ZAPI. Verify coverage per configuration: disabling all web services and restricting individual SVMs have different scope.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://security.netapp.com/advisory/NTAP-20261021-0021Response evidence
  2. Operating entityhttps://www.netapp.com/company/legal/privacy-policy/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments