CVE-2026-28199mediumCWE-347

CVE-2026-28199: falha de média gravidade em Cohesity NetBackup Flex OS

Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell

Publicada em

Seguir esta CVE+ Monitorar NetBackup Flex OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.1%
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential material stored on the appliance.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Cohesity · NetBackup Flex OS
CVEs relacionadas — Cohesity NetBackup Flex OS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28197CRITICALPrivilege Escalation via Argument Injection in NetBackup Flex OS ShellEPSS 0.7%CVE-2026-28198CRITICALPrivilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS ShellEPSS 0.3%