CVE-2026-22056
LowCVSS 2.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
StorageGRID versions 11.5 and later in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause a partial Denial of Service.
Risk Assessment
The risk is the possibility of disrupting StorageGRID services, which may affect data availability and operations in the organization.
Recommendation
It is recommended to review StorageGRID configuration for non-standard settings and apply appropriate mitigations to reduce the risk of DoS attacks.
Other vulnerabilities in StorageGRID
See all- CVE-2026-22058Critical
StorageGRID versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
- CVE-2026-22051Medium
A vulnerability in StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 allows an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results they do not have access to.
Original NVD description (English source)
StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause a partial Denial of Service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS