9.1 Critical

CVE-2026-22058 CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

Description

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

CVSS 4.0 detail

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Network
Attack complexity: High
Attack requirements: Present
Privileges required: None
Interaction: None
Confidentiality: High
Integrity: High
Availability: None
Confidentiality of other systems: None
Integrity of other systems: None
Availability of other systems: None

Affected products and versions

Product	Affected versions	Fixed in
StorageGRID (formerly StorageGRID Webscale) 11.3	11.3 → latest	No fix stated

References

security.netapp.com security.netapp.com

Timeline

Published November 3, 2026
Last modified November 5, 2026

The 8 CVEs of StorageGRID (formerly StorageGRID Webscale) →

CVE-2026-22060 CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale) 6.9 Medium CVE-2026-22063 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products 6.0 Medium CVE-2026-22051 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information… 2.3 Low CVE-2026-22048 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and… 7.1 High

Track this CVE