CVE-2025-26517
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-19

Last updated on: 2025-09-23

Assigner: NetApp, Inc.

Description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege escalation vulnerability. Successful exploit could allow an unauthorized authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-19
Last Modified
2025-09-23
Generated
2026-06-16
AI Q&A
2025-09-19
EPSS Evaluated
2026-06-15
NVD
CVE-2025-26517
EUVD
EUVD-2025-30271
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
netapp storagegrid to 11.8.0.15 (exc)
netapp storagegrid From 11.9.0 (inc) to 11.9.0.8 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects StorageGRID versions prior to 11.8.0.15 and 11.9.0.8, allowing an unauthorized authenticated attacker to escalate privileges. The attacker could discover Grid node names and IP addresses or modify Storage Grids.

Impact Analysis

The vulnerability could allow an attacker with some level of authentication to gain higher privileges, potentially exposing sensitive network information such as Grid node names and IP addresses, or enabling unauthorized modifications to Storage Grids, which could disrupt operations or compromise data integrity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-26517. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart