PT-2025-38589 · Netapp · Storagegrid

Published 2025-09-19 · Updated 2025-09-19 · CVE-2025-26514

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions StorageGRID versions prior to 11.8.0.15 StorageGRID versions prior to 11.9.0.8

Description StorageGRID (formerly StorageGRID Webscale) is susceptible to a Reflected Cross-Site Scripting issue. Successful exploitation could allow an attacker to view or modify configuration settings or add or modify user accounts, but requires the attacker to know specific information about the target instance and trick a privileged user into clicking a specially crafted link.

Recommendations Update StorageGRID to version 11.8.0.15 or later. Update StorageGRID to version 11.9.0.8 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-26514

Affected Products

Storagegrid

References · 4

• https://osv.dev/vulnerability/CVE-2025-26514 · Vendor Advisory
• https://security.netapp.com/advisory/NTAP-20250910-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26514 · Security Note
• https://twitter.com/CVEnew/status/1969110846266884476 · Twitter Post