CVE-2026-28197criticalCWE-88

CVE-2026-28197: falha crítica em Cohesity NetBackup Flex OS

Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

Publicada em

Seguir esta CVE+ Monitorar NetBackup Flex OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.7%
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted control over the Flex appliance host and all hosted containers, fully compromising confidentiality, integrity, and availability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Cohesity · NetBackup Flex OS
CVEs relacionadas — Cohesity NetBackup Flex OS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28198CRITICALPrivilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS ShellEPSS 0.3%CVE-2026-28199MEDIUMSensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS ShellEPSS 0.1%