CVE-2025-26517

published 2025-09-19

CVE-2025-26517: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful…

Priority P4 33 medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

StorageGRID (formerly
StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are
susceptible to a privilege escalation vulnerability. Successful exploit
could allow an unauthorized authenticated attacker to discover Grid node
names and IP addresses or modify Storage Grades.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netapp	storagegrid	< 11.9.0.8	11.9.0.8
netapp	storagegrid	< 11.8.0.15	11.8.0.15
netapp	storagegrid	>= 11.9.0 < 11.9.0.8	11.9.0.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-266