CVE-2026-22048
HighSummary
Wersje StorageGRID (wcześniej StorageGRID Webscale) przed 11.9.0.12 i 12.0.0.4 z włączonym i skonfigurowanym Single Sign-on do użycia Microsoft Entra ID (wcześniej Azure AD) są podatne na lukę typu Server-Side Request Forgery (SSRF). Udany atak może pozwolić uwierzytelnionemu napastnikowi z niskimi uprawnieniami na usunięcie danych konfiguracyjnych lub zablokowanie dostępu do niektórych zasobów.
Risk Assessment
Organizacja może być narażona na utratę danych konfiguracyjnych oraz na problemy z dostępem do zasobów, co może prowadzić do zakłóceń w działaniu systemów.
Recommendation
Zaleca się aktualizację do wersji StorageGRID 11.9.0.12 lub 12.0.0.4 oraz przegląd konfiguracji Single Sign-on w celu zminimalizowania ryzyka związane z tą podatnością.
Related vulnerabilities
- CVE-2026-93467Critical
The OAKlouds developed by HGiga has an Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.
- CVE-2026-85878Critical
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69843Critical
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-62874Critical
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-87886HighActively exploited
The vulnerability is a local privilege escalation due to insecure file permissions. It affects Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, and Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
- CVE-2026-87701Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85889Critical
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85885Critical
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-77903Critical
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an authenticated attacker with low privileges to delete configuration data or deny access to some resources.