by Kastro
Paper/Archive/CVE-2026-22058

CVE-2026-22058

NETAPP StorageGRID (formerly StorageGRID Webscale) — CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

Affected

ProductAffectedFixed inSource
StorageGRID (formerly StorageGRID Webscale)11.3 – < 11.9.0.15, 12.0.0.9, 12.1.0.111.9.0.15, 12.0.0.9, 12.1.0.1CNA

Scores by source

netapp (CNA)9.1CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

refsecurity.netapp.com/advisory/NTAP-20261103-0001