CVE-2026-22051 LOW

CVE-2026-22051

Vendor Netapp
Product StorageGRID (formerly StorageGRID Webscale)
Published April 20, 2026
Last update April 21, 2026

CVSS base score

2.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.

Key dates

02Disclosure timeline

April 20, 2026 CVE published
April 21, 2026 Record updated