What’s Vulnerable › Products

NetApp StorageGRID vulnerabilities

75 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your NetApp StorageGRID version is affected

Exploited NetApp StorageGRID vulnerabilities

• CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
• CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)

Latest NetApp StorageGRID vulnerabilities

• CVE-2026-22056 — CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 2.3)
• CVE-2026-22051 — (CVSS 4.3)
• CVE-2026-22048 — (CVSS 7.1)
• CVE-2025-26517 — CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 5.4)
• CVE-2025-26516 — CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 5.3)
• CVE-2025-26515 — CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 7.5)
• CVE-2025-26514 — CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 6.4)
• CVE-2025-25292 — Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) (CVSS 9.8)
• CVE-2025-25291 — ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) (CVSS 9.8)
• CVE-2024-21994 — CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 4.3)
• CVE-2024-21988 — CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 5.3)
• CVE-2024-21984 — Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 6.9)
• CVE-2024-21983 — Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 6.5)
• CVE-2023-27318 — Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 7.5)
• CVE-2022-38734 — (CVSS 7.5)
• CVE-2022-23238 — (CVSS 6.5)
• CVE-2022-37434 — (CVSS 9.8)
• CVE-2022-1678 — (CVSS 7.5)
• CVE-2022-0778 — Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVSS 7.5)
• CVE-2022-23233 — (CVSS 7.5)
• CVE-2022-23232 — (CVSS 4.9)
• CVE-2022-23806 — (CVSS 9.1)
• CVE-2022-23773 — (CVSS 7.5)
• CVE-2022-23772 — (CVSS 7.5)
• CVE-2021-27006 — (CVSS 4.4)