EN PT-BR
← Voltar ao feed
medium

CERT-FR relays NetApp advisories for multiple StorageGRID vulnerabilities (CVE-2026-22058, CVE-2026-22060)

1 fonte(s) · 1 atualização(ões) · publicado 03/11/2026 21:00 · coletado há 1 hora

CERT-FR bulletin CERTFR-2026-AVI-1453 relays two NetApp security advisories of 3 November 2026, NTAP-20261103-0001 and NTAP-20261103-0002, covering multiple vulnerabilities in NetApp StorageGRID. CERT-FR says an attacker could use them to compromise data confidentiality and data integrity. The bulletin names CVE-2026-22058 and CVE-2026-22060. It gives no CVSS scores, prerequisites, attack vector or exploitation status. The NetApp advisories themselves were not reviewed for this record.

Entenda a falha

A vulnerabilidade

CERT-FR bulletin CERTFR-2026-AVI-1453 relays two NetApp advisories covering multiple vulnerabilities in NetApp StorageGRID, including CVE-2026-22058 and CVE-2026-22060. It says an attacker could compromise data confidentiality and integrity. It gives no CVSS scores, component, prerequisites, attack vector or per-CVE detail. Affected: 12.0.x before 12.0.0.9, 12.1.x before 12.1.0.1, and versions before 11.9.0.15. Fixes are in 12.0.0.9, 12.1.0.1 and 11.9.0.15 or later.

Como foi descoberta

The articles do not say how the flaws were found or who reported them. NetApp published advisories NTAP-20261103-0001 and NTAP-20261103-0002 on 3 November 2026, and CERT-FR relayed them in a bulletin dated 4 November 2026. The NetApp advisories were not reviewed, and no exploitation in the wild is reported.

Explicação gerada por IA a partir da matéria e dos artigos, em 06/11/2026 12:24.

Detalhes técnicos

  • Affected: StorageGRID 12.0.x earlier than 12.0.0.9, StorageGRID 12.1.x earlier than 12.1.0.1, and StorageGRID versions earlier than 11.9.0.15 (cert.cyber.gouv.fr).
  • The bulletin does not map each CVE to a component and does not report exploitation in the wild.

Remediação

Apply the fixed versions listed in the NetApp advisories NTAP-20261103-0001 and NTAP-20261103-0002. Per the affected-version ranges, these are StorageGRID 12.0.0.9, 12.1.0.1 and 11.9.0.15 or later (cert.cyber.gouv.fr).

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 03/11/2026 21:00 · coletado 06/11 12:00 primeiro registro

    CERT-FR relays NetApp advisories for multiple StorageGRID vulnerabilities (CVE-2026-22058, CVE-2026-22060)

    ler a análise desta fonte

    CERT-FR bulletin CERTFR-2026-AVI-1453 relays two NetApp security advisories of 3 November 2026, NTAP-20261103-0001 and NTAP-20261103-0002, covering multiple vulnerabilities in NetApp StorageGRID. CERT-FR says an attacker could use them to compromise data confidentiality and data integrity. The bulletin names CVE-2026-22058 and CVE-2026-22060. It gives no CVSS scores, prerequisites, attack vector or exploitation status. The NetApp advisories themselves were not reviewed for this record.

    Technical Details

    • Affected: StorageGRID 12.0.x earlier than 12.0.0.9, StorageGRID 12.1.x earlier than 12.1.0.1, and StorageGRID versions earlier than 11.9.0.15 (cert.cyber.gouv.fr).
    • The bulletin does not map each CVE to a component and does not report exploitation in the wild.

    Remediation

    Apply the fixed versions listed in the NetApp advisories NTAP-20261103-0001 and NTAP-20261103-0002. Per the affected-version ranges, these are StorageGRID 12.0.0.9, 12.1.0.1 and 11.9.0.15 or later (cert.cyber.gouv.fr).