CVE-2026-22060medium

CVE-2026-22060: medium-severity vulnerability in NETAPP StorageGRID (formerly StorageGRID…

CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

Published

Follow this CVE+ Monitor StorageGRID

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9
All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Affected products
NETAPP · StorageGRID (formerly StorageGRID Webscale)
Related CVEs — NETAPP StorageGRID (formerly StorageGRID…

In the same product, most dangerous first.

CVE-2026-22048HIGHCVE-2026-22048EPSS 0.3%CVE-2026-22051LOWCVE-2026-22051EPSS 0.2%CVE-2026-22058CRITICALCVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)EPSS —