CVE-2026-22058: Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)
Published Nov 3, 2026
·Updated
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
Event History
Nov 3, 2026
CVE Published
via MITRE·09:41 PM
Data Sourced
via MITRE·09:41 PM
DescriptionWeakness
Data Sourced
via NVD·10:19 PM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are exposed?
StorageGRID versions 11.3 and higher are affected when an attacker can communicate with the Grid Network on certain ports. The provided information does not identify the specific ports or whether they are exposed in a default deployment.
2
What does an attacker need to exploit this issue?
An attacker does not need prior privileges or user interaction, but needs product-specific knowledge and network communication to the Grid Network on certain ports. Successful exploitation allows unauthorized requests.