CVE-2025-26513

Published: Aug 7, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges.

Affected (1)

Products: Netapp: San Host Utilities

Netapp

1 product

San Host Utilities

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netapp San Host Utilities	Before 8.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://security.netapp.com/advisory/NTAP-20250806-0001

Source: security-alert@netapp.com

Vendor Advisory

Timeline

No history available yet.