PT-2026-136675
CVE-2026-22058
·
Published
2026-11-03
·
Updated
2026-11-03
Description by
CVSS 4.0
9.1
CriticalMetricsAV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
StorageGRID versions 11.3 through 11.9.0.14
StorageGRID versions 12.0.0.0 through 12.0.0.8
StorageGRID versions 12.1.0.0 through 12.1.0.0
Description
An authentication bypass allows an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests to the system.
Recommendations
Update to version 11.9.0.15.
Update to version 12.0.0.9.
Update to version 12.1.0.1.
Found an issue in the description? Have something to add? Feel free to write us 👾