Description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
INFO
Published Date :
2026-02-17T23:01:30.331Z
Last Modified :
2026-02-18T13:44:08.177Z
Source :
netapp
AFFECTED PRODUCTS
The following products are affected by CVE-2026-22048 vulnerability.
| Vendors | Products |
|---|---|
| Netapp |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22048.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact