2.3
Low
CVE-2026-22051 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information…
Description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| StorageGRID (formerly StorageGRID Webscale) 12.0 | earliest → < 12.0.0.6 | 12.0.0.6 |
| StorageGRID (formerly StorageGRID Webscale) 11.9 | earliest → < 11.9.0.13 | 11.9.0.13 |
References
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of StorageGRID (formerly StorageGRID Webscale)
The 8 CVEs of StorageGRID (formerly StorageGRID Webscale) →
CVE-2026-22060
CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
6.9
Medium
CVE-2026-22058
CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
9.1
Critical
CVE-2026-22063
CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products
6.0
Medium
CVE-2026-22048
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and…
7.1
High