Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-17 | 1 | Disclosure1 |
| 2026-02-18 | 3 | Disclosure1General1Patch1 |
CVE-2026-22048 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Az… https://www.cve.org/CVERecord?id=CVE-2026-22048
Post summary
The post announces CVE‑2026‑22048, detailing affected StorageGRID versions and SSO configuration, but does not provide a PoC, exploit code, or patch information.
CVE-2026-22048 Server-Side Request Forgery in StorageGRID with Microsoft... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22048 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The text announces a new Server‑Side Request Forgery vulnerability (CVE‑2026‑22048) affecting StorageGRID, with a brief description and link to details.
⚡ New CVE Alert: CVE-2026-22048 📊 Severity: 7.1 🚨 Risk Level: High 🧩 Affects: Microsoft Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22048 #CVE-2026-22048 #CVE #High #Microsoft #CyberSecurity #InfoSec https://t.co/uByt2EbJft
Post summary
The tweet merely announces CVE-2026-22048, notes a 7.1 severity score and high risk for Microsoft, but provides no technical details or mitigation information.
🚨 HIGH-severity SSRF in NETAPP StorageGRID (CVE-2026-22048): Authenticated attackers can disrupt or delete configs when SSO with Microsoft Entra ID is enabled. Patch now or disable SSO! https://radar.offseq.com/threat/cve-2026-22048-918-in-netapp-storagegrid-formerly--5c913f90... https://t.co/swsn4KG4fp
Post summary
The tweet announces a high‑severity SSRF flaw (CVE‑2026‑22048) in NETAPP StorageGRID that lets authenticated attackers disrupt or delete configurations via SSO with Microsoft Entra ID, and it urges users to apply the patch or disable SSO immediately.