5.4Mittel
CVE-2025-26517CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Beschreibung
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.
Schwachstellentyp (CWE):
CWE-266
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| NetApp | StorageGRID | < 11.8.0.15, < 11.9.0.8 |
Referenzen und Patches
- https://security.netapp.com/advisory/NTAP-20250910-0004 Vendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*< 11.8.0.15cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*≥ 11.9.0 < 11.9.0.8