Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: NETAPP StorageGRID (formerly StorageGRID Webscale) 11.9.0.15, 12.0.0.9, 12.1.0.1 Clear all filters
TI-2026-84811 CVE-2026-22060 · GHSA-wrhp-xhf3-wvm3

Authentication bypass in NetApp StorageGRID exposes grid-only APIs

Priority LOW 36

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2026-11-03 Fixed in 11.9.0.15, 12.0.0.9 +1 CWE-288
TI-2026-84807 CVE-2026-22058 · GHSA-h4vc-x53f-c73h

Authentication bypass in NetApp StorageGRID

Priority MEDIUM 41

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00265 Published 2026-11-03 Fixed in 11.9.0.15, 12.0.0.9 +1 CWE-288