{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/storagegrid/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-22058"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["StorageGRID (\u003e= 11.3)","StorageGRID"],"_cs_severities":["high"],"_cs_tags":["vulnerability","netapp","storagegrid"],"_cs_type":"advisory","_cs_vendors":["NetApp"],"content_html":"\u003cp\u003eNetApp has disclosed a high severity authentication bypass vulnerability, tracked as CVE-2026-22058, affecting StorageGRID versions 11.3 and higher. An attacker with product-specific knowledge and the ability to communicate with the Grid Network can perform unauthorized requests. Public proof-of-concept exploit code is available on Sploitus.\u003c/p\u003e\n","date_modified":"2026-11-04T16:18:11Z","date_published":"2026-11-04T00:46:14Z","id":"https://feed.craftedsignal.io/briefs/2026-11-netapp-storagegrid-auth-bypass/","summary":"NetApp StorageGRID versions 11.3 and higher are vulnerable to an authentication bypass (CVE-2026-22058) that allows unauthorized requests via the Grid Network. Public proof-of-concept exploit code has been published.","title":"NetApp StorageGRID: Authentication bypass (CVE-2026-22058)","url":"https://feed.craftedsignal.io/briefs/2026-11-netapp-storagegrid-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - StorageGRID","version":"https://jsonfeed.org/version/1.1"}