9.1Crítica

CVE-2026-22058CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

NETAPP StorageGRID (formerly StorageGRID Webscale) Publicada: (hace 11 días)

Descripción

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

Debilidad (CWE): CWE-288

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
NETAPP StorageGRID (formerly StorageGRID Webscale) 11.3 – < 11.9.0.15, 12.0.0.9, 12.1.0.1

Referencias y parches