CVE-2026-22048

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22048", "assignerOrgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "state": "PUBLISHED", "assignerShortName": "netapp", "dateReserved": "2026-01-05T22:47:18.701Z", "datePublished": "2026-02-17T23:01:30.331Z", "dateUpdated": "2026-02-18T13:44:08.177Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "StorageGRID (formerly StorageGRID Webscale)", "vendor": "NETAPP", "versions": [{"lessThan": "11.9.0.12", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "12.0.0.4", "status": "affected", "version": "12.0.0.0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources."}], "value": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"description": "918", "lang": "en"}]}], "providerMetadata": {"orgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "shortName": "netapp", "dateUpdated": "2026-02-17T23:01:30.331Z"}, "references": [{"url": "https://security.netapp.com/advisory/NTAP-20260217-0001"}], "source": {"advisory": "NTAP-20260217-0001", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-918", "lang": "en", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-18T13:43:51.738952Z", "id": "CVE-2026-22048", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T13:44:08.177Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22048", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-18T13:43:51.738952Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-18T13:44:03.157Z"}}], "cna": {"source": {"advisory": "NTAP-20260217-0001", "discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NETAPP", "product": "StorageGRID (formerly StorageGRID Webscale)", "versions": [{"status": "affected", "version": "0", "lessThan": "11.9.0.12", "versionType": "custom"}, {"status": "affected", "version": "12.0.0.0", "lessThan": "12.0.0.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://security.netapp.com/advisory/NTAP-20260217-0001"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.", "supportingMedia": [{"type": "text/html", "value": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "918"}]}], "providerMetadata": {"orgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "shortName": "netapp", "dateUpdated": "2026-02-17T23:01:30.331Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22048", "state": "PUBLISHED", "dateUpdated": "2026-02-18T13:44:08.177Z", "dateReserved": "2026-01-05T22:47:18.701Z", "assignerOrgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "datePublished": "2026-02-17T23:01:30.331Z", "assignerShortName": "netapp"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "StorageGRID (formerly StorageGRID Webscale)", "vendor": "NETAPP", "versions": [{"lessThan": "11.9.0.12", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "12.0.0.4", "status": "affected", "version": "12.0.0.0", "versionType": "custom"}]}], "source": "security-alert@netapp.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources."}, {"lang": "es", "value": "Las versiones de StorageGRID (anteriormente StorageGRID Webscale) anteriores a la 11.9.0.12 y 12.0.0.4 con inicio de sesi\u00f3n \u00fanico habilitado y configurado para usar Microsoft Entra ID (anteriormente Azure AD) como IdP son susceptibles a una vulnerabilidad de falsificaci\u00f3n de petici\u00f3n del lado del servidor (SSRF). Un exploit exitoso podr\u00eda permitir a un atacante autenticado con pocos privilegios eliminar datos de configuraci\u00f3n o denegar el acceso a algunos recursos."}], "id": "CVE-2026-22048", "lastModified": "2026-06-17T10:19:25.587", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "security-alert@netapp.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22048", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-18T13:43:51.738952Z", "version": "2.0.3"}}]}, "published": "2026-02-18T00:16:18.700", "references": [{"source": "security-alert@netapp.com", "url": "https://security.netapp.com/advisory/NTAP-20260217-0001"}], "sourceIdentifier": "security-alert@netapp.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,11.9.0.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[12.0.0.0,12.0.0.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "StorageGRID (formerly StorageGRID Webscale)", "source": "cna", "vendor": "NETAPP"}, "product": "storagegrid", "vendor": "netapp"}], "analysis": {"en": {"generated_at": "2026-04-18T12:01:01.658546+00:00", "value": {"mitigation_remediation": ["Upgrade StorageGRID to at least version 11.9.0.12 or 12.0.0.4, which contain the SSRF fix", "If an upgrade is not immediately possible, disable Single Sign\u2011On or the Microsoft Entra ID identity provider configuration to eliminate the vulnerable authentication flow", "Review and restrict internal network access and monitor logs for unauthorized configuration deletions or denial\u2011of\u2011service attempts"], "summary": {"action": "Patch", "impact": "Server\u2011Side Request Forgery can delete configuration data or deny access to resources, affecting integrity and availability"}, "threat_synthesis": {"affected_systems": "The affected product is NetApp StorageGRID (formerly StorageGRID Webscale). Vulnerable releases are any version earlier than 11.9.0.12 and 12.0.0.4 when Single Sign\u2011On is enabled and Microsoft Entra ID is configured as the identity provider.", "description_and_impact": "NetApp StorageGRID versions prior to 11.9.0.12 and 12.0.0.4 that have Single Sign\u2011On enabled and use Microsoft Entra ID as an identity provider are vulnerable to a Server\u2011Side Request Forgery flaw. An attacker who is authenticated but has only low privileges can exploit the vulnerability to delete configuration data or make certain resources unavailable. The weakness is identified as CWE\u2011918.", "risk_and_exploitability": "The CVSS score of 7.1 indicates a high severity, with a low EPSS probability (<1%) and no listing in the CISA KEV catalog, suggesting a low exploitation likelihood at the present time. The attack vector is inferred to require authenticated access; a user with limited permissions can trigger the SSRF to target internal resources via the StorageGRID server, potentially deleting configuration data or blocking access to resources. Public exploitation is not documented, but the vulnerability can be leveraged by insiders or compromised low\u2011privilege accounts to disrupt the system\u2019s operation."}}}}, "created": "2026-02-18T10:33:02.908557+00:00", "title": "SSRF in NetApp StorageGRID with Microsoft Entra ID SSO", "updated": "2026-04-18T12:15:15.768112+00:00", "vendors": ["netapp", "netapp$PRODUCT$storagegrid"]}