Skip to content

Netapp · product

StorageGRID (formerly StorageGRID Webscale)

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability which allows an unauthenticated remote a…CVE-2020-8571NetApp · 1.8% likely
  2. StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS) of…CVE-2022-23233Netapp · 0.9% likely
  3. StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked…CVE-2022-23232Netapp · 0.8% likely
  4. Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnera…CVE-2022-23238Netapp · 0.8% likely
  5. Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2023-27318NetApp · CVSS 6.5 · 0.7% likely

    CWE-248

  6. CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2026-22060NETAPP · CVSS 6.9 · 0.3% likely

    CWE-288

  7. StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an…CVE-2026-22048NETAPP · CVSS 7.1 · 0.3% likely

    CWE-918

  8. StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges…CVE-2021-27006Netapp · 0.3% likely
  9. CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2026-22058NETAPP · CVSS 9.1 · 0.3% likely

    CWE-288

  10. CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)CVE-2024-21988NetApp · CVSS 5.3 · 0.2% likely

    CWE-347

  11. StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an a…CVE-2026-22051NETAPP · CVSS 2.3 · 0.2% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.