Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

NetApp StorageGRID lets attackers send unauthorized requests

CVE-2026-22058 · published today
Summary

Versions of NetApp StorageGRID 11.3 and later can be tricked into accepting commands from someone who knows how the system works and can reach it on certain network ports. This could let an outsider perform actions they shouldn’t be able to, potentially exposing or altering stored data. Apply the vendor’s security update or restrict network access to the Grid Network to stop the risk.

What to do
  • Update netapp storagegrid (formerly storagegrid webscale) to version 11.9.0.15, 12.0.0.9, 12.1.0.1 or later.
Affected software
VendorProductAffected versions
netapp storagegrid (formerly storagegrid webscale) < 11.9.0.15, 12.0.0.9, 12.1.0.1
Original advisory text
CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.1 Critical
Timeline
Published3 Nov 2026
Updated3 Nov 2026
First seen3 Nov 2026
Sources
CVE-2026-22058 · NVD
CVE-2026-22058 · MITRE
Track software like this
Free during beta