cyfenced.com →

[ CVE-2026-22060 · Published 3 Nov 2026 ]

Vulnerability in NETAPP StorageGRID (formerly StorageGRID Webscale)

CVSS 6.9 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1453

    Multiple vulnerabilities in NetApp StorageGRID Translated from French

    Multiple vulnerabilities have been discovered in NetApp StorageGRID. They allow an attacker to cause a breach of data confidentiality and a breach of data integrity.

    CVE-2026-22058CVE-2026-22060
  • BSI CERT-BundWID-SEC-2026-4318

    NetApp StorageGRID: Multiple vulnerabilities Translated from German

    Risk mediumCVE-2026-22058CVE-2026-22060

[ References ]References