Vulnerability · Published Nov 3, 2026 · Assigned by netapp
CVE-2026-22058CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Critical 9.1
In plain English
A critical-severity authentication bypass in StorageGRID (formerly StorageGRID Webscale) from NETAPP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 4.0)9.1Critical
Exploit odds (30 days)0.3%top 81.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | 11.3 – before 11.9.0.15, 12.0.0.9, 12.1.0.1 |
Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N