Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-22058 EUVD-2026-116529GHSA-h4vc-x53f-c73h

CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

Published Nov 3, 2026 · Updated Nov 5, 2026 · Assigned by netapp

Description

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

Affected products

VendorProductAffectedFixed
NETAPP StorageGRID (formerly StorageGRID Webscale) 11.3 – < 11.9.0.15, 12.0.0.9, 12.1.0.1 11.9.0.15, 12.0.0.9, 12.1.0.1

Advisories 1

References