CVE-2025-26516

Published: Sep 19, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: security-alert@netapp.com (Secondary)

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of Service vulnerability. Successful exploit could allow an unauthenticated attacker to cause a Denial of Service on the Admin node.

Affected (2)

Products: Netapp: Storagegrid

Netapp

1 product

Storagegrid

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Storagegrid	Before 11.8.0.15
Netapp Storagegrid	From 11.9.0 to 11.9.0.8

Related CWEs

CWE-405

Asymmetric Resource Consumption (Amplification)

The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric."

References (1)

https://security.netapp.com/advisory/NTAP-20250910-0003

Source: security-alert@netapp.com

Vendor Advisory

Timeline

No history available yet.