Vulnerability in NETAPP StorageGRID (formerly StorageGRID Webscale)

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.1

[ Description ]Official description

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

[ Fixes ]Fixes and patches

• Security bulletin: NetApp NTAP-20261103-0002Vendor patch or bulletin · CERT-FR · security.netapp.com/advisory/NTAP-20261103-0002, cited by CERT-FR CERTFR-2026-AVI-1453
• Security bulletin: NetApp NTAP-20261103-0001Vendor patch or bulletin · CERT-FR · security.netapp.com/advisory/NTAP-20261103-0001, cited by CERT-FR CERTFR-2026-AVI-1453

[ Advisories ]Government CERT advisories

• CERT-FR4 Nov 2026CERTFR-2026-AVI-1453

  Multiple vulnerabilities in NetApp StorageGRID Translated from French

  Multiple vulnerabilities have been discovered in NetApp StorageGRID. They allow an attacker to cause a breach of data confidentiality and a breach of data integrity.

  CVE-2026-22058CVE-2026-22060
• BSI CERT-Bund3 Nov 2026WID-SEC-2026-4318

  NetApp StorageGRID: Multiple vulnerabilities Translated from German

  Risk mediumCVE-2026-22058CVE-2026-22060

[ References ]References

• security.netapp.com/advisory/NTAP-20261103-0001