CVE-2026-22060

None

CVSS

—

EPSS

0.3%

Published

Nov 3, 2026

CISA due date

—

The record

All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid.

Affected packages

Ecosystem	Package	Introduced	Fixed