CVE-2026-22054Active Exploitation(netapp / active_iq_config_advisor)

LOWCVSS 8.8 · HIGH

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

Prioritize remediation for netapp active_iq_config_advisor systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.

netapp CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security.netapp.com/advisory/ntap-20260603-0001

Weakness type (CWE)

CWE-259

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

active_iq_config_advisor

Threat summary

Active exploitation appears in 1 classified signals
2 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

netapp

Products

active_iq_config_advisor

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Active Exploitation

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew136d
Disclosure
CVE-2026-22054 Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupp… https://www.cve.org/CVERecord?id=CVE-2026-22054
Post summary
The text announces CVE‑2026‑22054 affecting Active IQ Config Advisor 6.7.3, revealing hard‑coded credentials that let low‑privilege authenticated users perform unauthorized operations. No exploit code, patch, or active exploitation is mentioned.
00010143
57.6K followersView on X
VulDB 🛡@vuldb136d
Active Exploitation
Our CTI team identified a lot of activities targeting NetApp Active IQ Config Advisor (CVE-2026-22054) https://vuldb.com/vuln/368230/cti
Post summary
CTI reports widespread activity targeting CVE‑2026‑22054 in NetApp Active IQ Config Advisor, indicating ongoing exploitation in the wild.
0000051
2.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	netapp	active_iq_config_advisor	6.7.3	-	-

Explore more

Back to dashboard netapp CVEs active_iq_config_advisor vulnerabilities