Reflected Cross-Site Scripting Vulnerability in StorageGRID by NetApp

CVE-2025-26514

What is CVE-2025-26514?

Certain versions of StorageGRID, specifically those before 11.8.0.15 and 11.9.0.8, are impacted by a Reflected Cross-Site Scripting vulnerability. This flaw allows an attacker to potentially view or modify critical configuration settings or to manipulate user accounts. To successfully exploit this vulnerability, the attacker must possess specific knowledge about the target instance and deceive a privileged user into interacting with a malicious link.

References