CVE-2026-22060

CVSS 6.9 (medium) · published 2026-11-03

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.

Weakness: CWE-288

Source: NVD CVE-2026-22060

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.