{“lastseen”:””,”description”:”StorageGRID (formerly \\nStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are \\nsusceptible to a Reflected Cross-Site Scripting vulnerability. \\nSuccessful exploit could allow an attacker to view or modify \\nconfiguration settings or add or modify user accounts but requires the \\nattacker to know specific information about the target instance and then\\n trick a privileged user into clicking a specially crafted link.”,”published”:”2025-09-19T18:31:54.948Z”,”modified”:”2025-09-19T18:49:58.274Z”,”type”:”cve”,”title”:”CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)”,”source”:”netapp”,”references”:”https:\/\/security.netapp.com\/advisory\/NTAP-20250910-0001″,”id”:”CVE-2025-26514″,”bulletinFamily”:””,”cwe”:[“CWE-79″],”cvelist”:null,”sourceData”:”NetApp StorageGRID 0\\nNetApp StorageGRID 0″,”sourceHref”:””,”cvss”:{“score”:6.4,”severity”:”MEDIUM”,”vector”:”CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:R\/S:U\/C:L\/I:H\/A:L”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”StorageGRID”,”version”:”0″,”vendor”:”NetApp”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”StorageGRID (formerly \\nStorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are \\nsusceptible to a Reflected Cross-Site Scripting vulnerability. \\nSuccessful exploit could allow an attacker to…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,46,12,21,13,7,11,5],"class_list":["post-18148","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-64","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n