{"resourceId":"netapp-advisory-ntap-20261021-0021-php2shell-ontap-fixes-20261029","versions":[{"version":"external-76f8c37469535bb95e74e44c0270eec3106a484eabdf2c65fce7a3973cca69ee","resource":{"id":"netapp-advisory-ntap-20261021-0021-php2shell-ontap-fixes-20261029","title":"NetApp advisory NTAP-20261021-0021 (v10.0): critical PHP2SHELL flaw affects ONTAP 9; fixed hotfix releases now listed across seven ONTAP lines, AIDE not affected","organization":"NetApp (Product Security)","sector":"Strategic partner: storage operating system and data services security","geography":"Global","publishedAt":"Initial release 10/21/2026; version 10.0 last updated 10/29/2026","publicationDate":"2026-10-29","eventDate":"2026-10-21","sourceName":"NetApp Product Security","sourceLabel":"October 2026 PHP Vulnerabilities in NetApp Products (NTAP-20261021-0021)","sourceUrl":"https://security.netapp.com/advisory/NTAP-20261021-0021","evidenceClass":"vendor-claim","outcomeClass":"cautionary","topics":["infrastructure","data-security","operating-model"],"finding":"NetApp's advisory for the PHP \"php2shell\" vulnerabilities (CVE-2026-109618 and CVE-2026-109619, each scored CRITICAL 9.2 under CVSS 4.0) lists ONTAP 9 as the affected product. NetApp states ONTAP 9 is affected only by CVE-2026-109618 and that an unauthenticated attacker could gain access as the www user but would be restricted to the PHP jail. NetApp says it is aware of public discussion of the vulnerability. The revision history shows fixes added between October 24 and October 29: first-fixed releases 9.14.1P18HF1, 9.15.1P20HF1, 9.16.1P16HF1, 9.17.1P11HF1, 9.18.1P8HF1, 9.19.1P3HF1 and 9.19.1P4 (added in version 10.0 on 10/29). On 10/26 the workaround text was replaced with a KB link. AI Data Engine (AIDE), the AIDE MCP Server, the AIDE LangChain Retriever and the NetApp Console Agent are listed as not affected. The advisory status remains Interim.","sledRelevance":"ONTAP is installed widely across state and local agencies, universities and school districts. A critical, publicly discussed management-plane flaw with fixed releases on every supported ONTAP line gives SLED storage teams a clear patch target. The AIDE not-affected listing matters to institutions weighing NetApp AI data services: the exposure sits in the ONTAP layer those services depend on, not in AIDE itself.","evidence":"Vendor security advisory with CVSS vectors, affected and not-affected product lists, fixed releases and a revision history. NetApp provides no exploitation data or independent validation.","architectureImplications":"The fix is delivered as ONTAP patch or hotfix releases per release line, so clusters on older or unsupported lines need an upgrade path first. Mixed-version estates, for example on-premises plus Cloud Volumes ONTAP, need a version inventory.","governanceImplications":"Interim status and ten revisions in nine days mean change boards should track the advisory rather than a one-time bulletin. Vulnerability-management SLAs should map to the CVSS 9.2 rating.","securityPrivacyImplications":"Unauthenticated network access to ONTAP web services is the exposure. Restricting management-interface reachability and applying the listed fixed release are the controls. NetApp says the impact is limited to the PHP jail, but this is the vendor's own assessment.","caveats":"Vendor-authored and still Interim; the content may change. The impact limits are NetApp's claim. The page is JavaScript-rendered; remediation and revision tabs were read in a headless browser. Our prior edition covered the companion KB article; this is the advisory itself, opened for the first time.","streamIds":["netapp"],"roles":{"sales":"Sales framing: this is a trust conversation, not an upsell. Account teams covering agencies and campuses running ONTAP can confirm that the customer knows about NTAP-20261021-0021 and which fixed release applies to each cluster. Offer help with an upgrade-readiness check rather than new hardware. When AI data services come up, point out that NetApp lists AIDE as not affected, but that the ONTAP foundation underneath it must be patched first. Do not characterize the risk beyond what NetApp states.","engineering":"Engineering framing: inventory every ONTAP cluster, including Cloud Volumes ONTAP and DR targets, by release line, then map each line to its first-fixed release (for example 9.16.1P16HF1 or 9.19.1P4). Confirm that management web services are not reachable from untrusted networks while upgrades are scheduled. Use the KB workaround only where an upgrade cannot happen in time. Validate non-disruptive upgrade prerequisites for HA pairs, and recheck the advisory, because it is still Interim and has changed ten times.","delivery":"Delivery framing: run this as a tracked change with a defined end state. Every cluster should be on a listed fixed release or have a documented, time-limited workaround exception. Sequence DR and non-production clusters first, and schedule HA rolling upgrades in maintenance windows. Record evidence for auditors. Assign one owner to watch revisions of the Interim advisory, and re-baseline the plan when NetApp adds or changes fixed releases."},"roleDetails":{"sales":{"customerProblem":"Agencies and campuses running ONTAP face a critical, publicly discussed management-plane vulnerability and need to know which fixed release applies to them.","stakeholders":["Storage administrator","CISO / vulnerability management","Change advisory board","IT director"],"discoveryQuestions":["Which ONTAP release lines are you running, including cloud and DR copies?","Are ONTAP management interfaces reachable from user or internet networks?","What is your SLA for critical vendor advisories?"],"valueHypothesis":"A rapid readiness check can shorten time to a fixed release without new purchases.","potentialEngagement":"Bounded ONTAP patch-readiness and exposure review across the customer's clusters.","unsupportedClaims":["That any specific customer has been exploited","That the PHP jail fully contains impact","That AIDE deployments are at risk from this advisory"]},"engineering":{"fit":"Applies to all ONTAP 9 estates; AIDE, AIDE MCP Server and Console Agent are listed as not affected.","architectureIntegration":"Map each cluster release line to the first-fixed release listed on the advisory remediation tab.","prerequisites":["Cluster version inventory","Support-site download access","Non-disruptive upgrade readiness for HA pairs"],"constraints":["Fixes exist only for listed release lines","Advisory still Interim and changing","Workaround via KB only as stopgap"],"security":"Limit management web services to admin networks and apply the fixed release; treat as critical (CVSS 9.2).","proofOfValue":["Post-upgrade version check against advisory list","Network scan confirming management interfaces are not exposed","Recheck advisory revision history before closure"]},"delivery":{"work":"Plan and execute ONTAP upgrades to fixed releases across all clusters.","dependencies":["NetApp support downloads","Change windows","Security team sign-off"],"ownership":"Central or departmental IT storage team, with security tracking closure.","skillsAdoption":"Storage admins familiar with rolling HA upgrades; security staff able to read NetApp advisories.","governanceCheckpoints":["Change approval per cluster","Workaround exception approval","Closure evidence review"],"acceptanceCriteria":["Proposed: 100% of clusters on a listed fixed release or approved exception","Proposed: no unplanned client outage during upgrades","Proposed: exceptions expire within an agreed period"],"risks":["Unsupported release lines without a fix","Upgrade disruption on misconfigured HA pairs","Advisory changes after closure"]}},"retrievedAt":"2026-10-31T03:09:34Z","enrichedAt":"2026-10-31T03:14:14Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Interpretation: patching and change windows depend on storage and security operations staff; no accessibility findings in the source.","procurementImplications":"Interpretation: fixes come with existing support entitlements; agencies on lapsed support or end-of-life hardware may need procurement before they can patch.","operatingModelImplications":"Interpretation: reinforces a continuous advisory-tracking role for storage teams rather than periodic patch cycles.","sourceVerification":{"openedUrl":"https://security.netapp.com/advisory/NTAP-20261021-0021","referenceExcerpt":"An unauthenticated attacker could potentially gain access as the www user but would be restricted to the PHP jail, limiting the scope of exploit.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}