CVE-2026-22058
CriticalCVSS 9.1Summary
StorageGRID versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the StorageGRID system, potentially compromising data confidentiality, integrity, or availability.
Recommendation
It is recommended to restrict access to the Grid Network and apply updates or mitigations recommended by the vendor.
Other vulnerabilities in StorageGRID
See all- CVE-2026-22056Low
StorageGRID versions 11.5 and later in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause a partial Denial of Service.
- CVE-2026-22051Medium
A vulnerability in StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 allows an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results they do not have access to.
Original NVD description (English source)
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS