CVE-2026-22056
CVE-2026-22056 is a low-severity vulnerability with a CVSS 4.0 base score of 2.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-774.
Key facts
- Severity: Low (CVSS 4.0 base score 2.3)
- EPSS exploit prediction: 0% (15th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-774
- Published:
- Last modified:
Description
StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause a partial Denial of Service.
Frequently asked questions
- What is CVE-2026-22056?
- StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause a partial Denial of Service.
- How severe is CVE-2026-22056?
- CVE-2026-22056 has a CVSS 4.0 base score of 2.3, rated low severity.
- Is CVE-2026-22056 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-22056?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-22056 published?
- CVE-2026-22056 was published on 2026-08-28 and last updated on 2026-09-01.
References
Other CWE-774 vulnerabilities
- CVE-2018-1000538 — High (CVSS 7.5): Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits…
- CVE-2024-48848 — Medium (CVSS 6.5): Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if…