Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Cohesity NetBackup Flex OS — github.com/cohesity/SecAdvisory/blob/master/COH-2026-0001.md Clear all filters
TI-2026-22538 CVE-2026-28199 · GHSA-chmq-8gh3-838c

Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell

Priority LOW 21

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00099 Published 2026-09-18 Fixed in 6.4 CWE-347
TI-2026-22537 CVE-2026-28198 · GHSA-h4hc-x5f6-wfc4

Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

Priority MEDIUM 42

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed acces…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0034 Published 2026-09-18 Fixed in 6.4 CWE-347
TI-2026-22536 CVE-2026-28197 · GHSA-3x2v-v38v-4mgx

Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

Priority MEDIUM 44

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-le…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00666 Published 2026-09-18 Fixed in 6.4 CWE-88