NETAPP StorageGRID (formerly StorageGRID Webscale) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NETAPP StorageGRID (formerly StorageGRID Webscale): 2 record(s), with affected versions and fixes.

CVE-2026-22051 Medium · 4.3 CWE-200 Apr 20, 2026

Exposure of Sensitive Information in Netapp Storagegrid

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.

CVE-2026-22048 High · 7.1 CWE-918 Feb 17, 2026

Server-Side Request Forgery (SSRF) in NETAPP StorageGRID (formerly StorageGRID Webscale)

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.