Skip to content
OpenAdvisories

Product · NETAPP

StorageGRID

8 known vulnerabilities.

StorageGRID at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202540
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 9.6
    WID-SEC-2026-2850 10 CVEs rev. 59

    Golang Go: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service zu verursachen, ein Cross Site Scripting durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.

    Oracle Red Hat SUSE NETAPP amazon Linux Windows
    first Aug 13, 2026
  • Medium max 9.8
    WID-SEC-2024-3251 385 CVEs rev. 252

    Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

    Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher bekannte Auswirkungen zu erzielen..

    Oracle Google IBM Red Hat Dell Linux
    first Oct 21, 2024
  • Medium max 9.1
    WID-SEC-2026-4318 2 CVEs

    NetApp StorageGRID: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp StorageGRID ausnutzen, um Informationen offenzulegen und Daten zu manipulieren.

    NETAPP
  • Medium max 7.5
    WID-SEC-2024-0518 4 CVEs rev. 87

    Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

    Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

    Oracle IBM Red Hat F5 Splunk Linux Windows macOS
    first Feb 29, 2024
  • High max 9.8
    WID-SEC-2023-0245 3 CVEs rev. 29

    Apache Portable Runtime (APR): Mehrere Schwachstellen

    Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

    Oracle IBM Red Hat F5 SUSE Linux Windows
    first Jan 31, 2023
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Low 2.3
    CVE-2026-22056

    CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause …

    NETAPP StorageGRID
  • Medium 5.4
    CVE-2025-26517

    CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or…

    NETAPP StorageGRID
  • Medium 5.3
    CVE-2025-26516

    CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node.

    NETAPP StorageGRID
  • High 7.5
    CVE-2025-26515

    CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the…

    NETAPP StorageGRID
  • Medium 6.4
    CVE-2025-26514

    CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user a…

    NETAPP StorageGRID
  • Medium 4.3
    CVE-2024-21994

    CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to a service crash.

    NETAPP StorageGRID
  • Medium 5.9
    CVE-2024-21984

    Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting (XSS) vulnerability. Successful exploit requires the attacker to know specific information about the target instance an…

    NETAPP StorageGRID
  • Medium 6.5
    CVE-2024-21983

    Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot.

    NETAPP StorageGRID