Netbackup Flex Os

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cohesity:netbackup_flex_os:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCohesity (0bb89676-6f90-5116-8e3a-497593d3991c)
ProductNetbackup Flex Os (a5064267-b01c-5ca6-8072-611224d90bbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28199 vulnerable 2026-10-13 12:28:30.833567 Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell
LOW (3.3)
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential material stored on the appliance.
Published: 2026-09-18T11:19:34.183Z
Updated: 2026-09-18T14:31:45.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28198 vulnerable 2026-10-13 12:28:30.655398 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell
HIGH (8.8)
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted root shell with full control over the Flex appliance host and all hosted containers, completely compromising confidentiality, integrity, and availability.
Published: 2026-09-18T11:12:23.941Z
Updated: 2026-09-18T14:31:44.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28197 vulnerable 2026-10-13 12:28:29.986193 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell
HIGH (8.8)
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted control over the Flex appliance host and all hosted containers, fully compromising confidentiality, integrity, and availability.
Published: 2026-09-18T11:07:19.877Z
Updated: 2026-09-18T14:31:44.840Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.