4 matches found
CVE-2025-26517
StorageGRID (formerlyStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 aresusceptible to a privilege escalation vulnerability. Successful exploitcould allow an unauthorized authenticated attacker to discover Grid nodenames and IP addresses or modify Storage Grades.
CVE-2025-26515
StorageGRID (formerlyStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 withoutSingle Sign-on enabled are susceptible to a Server-Side Request Forgery(SSRF) vulnerability. Successful exploit could allow an unauthenticatedattacker to change the password of any Grid Manager or Tenant Mana...
CVE-2025-26514
StorageGRID (formerlyStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 aresusceptible to a Reflected Cross-Site Scripting vulnerability.Successful exploit could allow an attacker to view or modifyconfiguration settings or add or modify user accounts but requires theattacker to know spe...
CVE-2025-26516
StorageGRID (formerlyStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 aresusceptible to a Denial of Service vulnerability. Successful exploitcould allow an unauthenticated attacker to cause a Denial of Service onthe Admin node.