Cohesity
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| NetBackup Flex OS | 3 | – | Sep 18, 2026 |
| NetBackup Administration Console web interface | 1 | – | Oct 11, 2026 |
Exploited and recent CVEs
- CVE-2026-108925 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 0.2%
- CVE-2026-28199 Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell <0.1%
- CVE-2026-28198 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell 0.3%
- CVE-2026-28197 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell 0.7%