{"id":"CVE-2026-22058","kind":"vulnerability","aliases":["CVE-2026-22058"],"related":[],"title":"NetApp StorageGRID: authentication bypass lets attackers with Grid Network access make unauthorized requests","description":"StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.","summary":"NetApp says StorageGRID 11.3 and higher let an attacker with product-specific knowledge who can reach the Grid Network on certain ports make unauthorized requests. NetApp lists the impact as disclosure of sensitive information or addition or modification of data. NetApp is not aware of public discussion.","severity":"critical","cvss":9.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","netapp","object-storage","storagegrid"],"not_affected_if":["grid-network-isolated"],"how_to_check":"- Check the StorageGRID version in the Grid Manager; 11.3 or higher is in NetApp's affected range.\n- Check whether hosts outside the grid can reach the Grid Network ports; restrict them to grid nodes.\n- Fixed versions are not on NetApp's advisory page. A third-party tracker (OpenCVE, from CNA data, unconfirmed) lists affected as below 11.9.0.15, 12.0.0.9, 12.1.0.1; confirm with NetApp support.","fix":null,"status":"open","published_at":"2026-11-03T22:19:47+00:00","first_seen_at":"2026-11-03T23:15:09+00:00","triaged_at":"2026-11-03T23:16:06+00:00","updated_at":"2026-11-03T23:17:24+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-03T23:16:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"NetApp StorageGRID: unauthorized requests possible from the Grid Network","impact":"medium","summary":"StorageGRID versions 11.3 and higher let an attacker who knows the product internals and can reach the Grid Network on certain ports send unauthorized requests. The sources do not say what data or actions those requests give access to.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["storagegrid","netapp","object-storage"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unauthorized requests reach the StorageGRID grid from the network","analyst_note":"Check the NVD entry and the NetApp advisory for the affected ports, the fixed versions and what the unauthorized requests can do.","how_to_check":"- Confirm the StorageGRID version with the admin console; `11.3` or higher is in the affected range.\n- Check whether the Grid Network ports are reachable from networks outside the storage grid.","plain_action":"","needs_analyst":true,"not_affected_if":["grid-network-isolated"],"who_is_affected":"StorageGRID deployments at version 11.3 or higher are in scope, and the exposure depends on whether untrusted hosts can reach the Grid Network on the affected ports. Teams that isolate the Grid Network from other networks are less exposed. unknown whether other configurations change the risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000678,"input_tokens":4107,"output_tokens":534,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the NVD entry and the NetApp advisory for the affected ports, the fixed versions and what the unauthorized requests can do.","search":"'-2026':15A,18A '-22058':16A,19A '11.3':29B,79C 'abil':92C 'access':10A 'addit':62B 'allow':82C 'attack':6A,34B,84C 'authent':3A 'awar':70B 'bypass':4A 'certain':47B,100C 'communic':94C 'cve':14A,17A 'data':66B 'disclosur':57B 'discuss':73B 'former':75C 'grid':8A,44B,97C 'higher':31B,81C 'impact':55B 'inform':60B 'infrastructur':20B 'knowledg':39B,89C 'let':5A,32B 'list':53B 'make':11A,49B,103C 'modif':64B 'netapp':1A,21B,26B,52B,67B 'network':9A,45B,98C 'object':23B 'object-storag':22B 'port':48B,101C 'product':37B,87C 'product-specif':36B,86C 'public':72B 'reach':42B 'request':13A,51B,105C 'say':27B 'sensit':59B 'specif':38B,88C 'storag':24B 'storagegrid':2A,25B,28B,74C,76C 'unauthor':12A,50B,104C 'version':78C 'webscal':77C","nicknames":[],"mitigations":[],"who_affected":"StorageGRID deployments on 11.3 or higher are affected per NetApp. Exposure depends on whether an attacker can communicate with the Grid Network on certain ports, and exploitation needs product-specific knowledge. Deployments that isolate the Grid Network from untrusted hosts are less exposed.","tier":"B","verified":{"who_affected":{"at":"2026-11-03T23:17:24Z","by":"analyst","doc":"https://security.netapp.com/advisory/NTAP-20261103-0001","run_id":1573}},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["critical","infrastructure","netapp","objectstorage","storagegrid"],"campaign_type":null,"first_public_at":"2026-11-03T22:19:47+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security-alert@netapp.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-22058","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22058","severity":null,"published_at":"2026-11-03T22:19:47+00:00","modified_at":"2026-11-03T22:19:47+00:00","first_seen_at":"2026-11-03T23:15:09+00:00","fetched_at":"2026-11-03T23:15:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-22058:1573","url":null,"severity":null,"published_at":"2026-11-03T23:17:24+00:00","modified_at":"2026-11-03T23:17:24+00:00","first_seen_at":"2026-11-03T23:17:24+00:00","fetched_at":"2026-11-03T23:17:24+00:00","note":"NetApp NTAP-20261103-0001 read: 11.3+ affected, Grid Network on certain ports, impact is disclosure of sensitive info or add/modify data, no known public discussion. Advisory page lists no fixed versions; OpenCVE (not primary) shows affected <11.9.0.15, 12.0.0.9, 12.1.0.1, so fix left unverified. fix_status 'none' had no vendor source, so I did not assert it."}],"documents":[{"id":61477,"url":"https://security.netapp.com/advisory/NTAP-20261103-0001","title":"NTAP-20261103-0001 Authentication Bypass Vulnerability in StorageGRID","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":61478,"url":"https://app.opencve.io/cve/CVE-2026-22058","title":"OpenCVE CVE-2026-22058 (lists affected range from CNA data)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}