Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp StorageGRID ausnutzen, um Informationen offenzulegen und Daten zu manipulieren.
Product
NetApp StorageGRID ist eine softwaredefinierte, objektbasierte Speicherlösung.
Vulnerabilities 2
-
Critical 9.1
CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
-
Medium 6.9
CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.
Revision history
-
#1
Initiale Fassung
References
-
NetApp Security Advisory vom 2026-11-03
https://security.netapp.com/advisory/NTAP-20261103-0001
-
NetApp Security Advisory vom 2026-11-03
https://security.netapp.com/advisory/NTAP-20261103-0002