CVE-2026-22060

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations…

Risk score: 41/100
CVSS: 6.9 v4.0
Published: 3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.9 medium

References

https://security.netapp.com/advisory/NTAP-20261103-0002

Original description

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.

Last activity 3 Nov 2026. Patch Forecast updates every hour.