CVE-2026-22048
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
12th
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
| Vendor | netapp |
| Product | storagegrid (formerly storagegrid webscale) |
| Published | Feb 17, 2026 |
| Last Updated | Feb 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for netapp storagegrid (formerly storagegrid webscale)
Be the first to know when new high vulnerabilities affecting netapp storagegrid (formerly storagegrid webscale) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Affected Versions
NETAPP / StorageGRID (formerly StorageGRID Webscale)
0 < 11.9.0.12 12.0.0.0 < 12.0.0.4