{"id":"CVE-2026-22058","title":"CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)","summary":"StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.","severity":"critical","cvss":9.1,"cvssVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","vendor":"NETAPP","product":"StorageGRID (formerly StorageGRID Webscale)","affected":["storagegrid_formerly_storagegrid_webscale >= 11.3 < 11.9.0.15, 12.0.0.9, 12.1.0.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-04T15:16:03.044210Z"},"published":"2026-11-03","updated":"2026-11-05","sourceUpdated":"2026-11-05T15:57:47.822Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-22058","references":[{"url":"https://security.netapp.com/advisory/NTAP-20261103-0001"}],"tags":["cve.org"],"epss":0.00265,"epssPercentile":0.18485,"ingestedAt":"2026-11-05T21:36:00.937Z","slug":"CVE-2026-22058","body":"## Overview\n\nStorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.\n\n## Affected\n\n- `storagegrid_formerly_storagegrid_webscale >= 11.3 < 11.9.0.15, 12.0.0.9, 12.1.0.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":50.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}