Description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | < 11.9.0.12, 12.0.0.0 – < 12.0.0.4 | 11.9.0.12 |
Advisories 1
- WID-SEC-2026-0434 NetApp StorageGRID: Schwachstelle ermöglicht Denial of Service und Manipulation von Daten BSI CERT-Bund (WID) · Feb 17, 2026