Unauthorized Request Vulnerability in NetApp StorageGRID Product
CVE-2026-22058

9.1CRITICAL

Key Information:

Vendor

Netapp

Status
Storagegrid (formerly Storagegrid Webscale)
Vendor
CVE Published:
3 November 2026

What is CVE-2026-22058?

NetApp StorageGRID versions 11.3 and above are vulnerable to a flaw that allows attackers with specific expertise to exploit the system. This vulnerability enables unauthorized requests over designated ports within the Grid Network. Such exploitation can compromise the integrity and availability of stored data, making it crucial for users to assess their risk and implement potential mitigations.

Affected Version(s)

StorageGRID (formerly StorageGRID Webscale) 11.3 < 11.9.0.15, 12.0.0.9, 12.1.0.1

References

https://security.netapp.com/advisory/NTAP-20261103-0001

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.