Read the docs
TI-2026-17742 Aliases CVE-2026-22048GHSA-q543-x74m-r8q9

Server-side request forgery in NetApp StorageGRID

Priority LOW 31CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00305 23rd percentileScored 2026-11-07
Fix Fixed StorageGRID (formerly StorageGRID Webscale) (NETAPP): 11.9.0.12, 12.0.0.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NetAppStorageGRID (formerly StorageGRID Webscale)before 11.9.0.12; 12.0.0.0 to before 12.0.0.411.9.0.12, 12.0.0.4Patch availableCNA
  • StorageGRID (formerly StorageGRID Webscale) VendorNetApp Affected before 11.9.0.12; 12.0.0.0 to before 12.0.0.4 Fixed in 11.9.0.12, 12.0.0.4 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*——NetApp
  • cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:* Versions — — ·NetApp

Remediation

  • Fix · CNA StorageGRID (formerly StorageGRID Webscale) (NETAPP) Fixed in 11.9.0.12, 12.0.0.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-22048
  2. 2026-10-03 Alias added: GHSA-q543-x74m-r8q9

References

Other 1

  • TI-2025-18529 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-36205 Redfish Authentication Bypass KEVCVSS 4.0CRITICAL 10.0
  • TI-2023-25106 Deserialization of untrusted data in Apache ActiveMQ KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-18535 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-18417 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 KEVCVSS 3.1CRITICAL 9.8
See all 2527 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences