Description
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Published: 2026-11-03
Score: 9.1 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 12:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Wed, 04 Nov 2026 09:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287

Wed, 04 Nov 2026 04:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287

Wed, 04 Nov 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Netapp
Netapp storagegrid
Vendors & Products Netapp
Netapp storagegrid

Tue, 03 Nov 2026 21:45:00 +0000

Type Values Removed Values Added
Description StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Title CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
References
Metrics cvssV4_0

{'score': 9.1, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Netapp Storagegrid
cve-icon MITRE

Status: PUBLISHED

Assigner: netapp

Published:

Updated: 2026-11-03T21:41:55.117Z

Reserved: 2026-01-05T22:49:12.526Z

Link: CVE-2026-22058

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-03T22:19:47.030

Modified: 2026-11-03T22:19:47.030

Link: CVE-2026-22058

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T11:45:12Z

Weaknesses