Cohesity

Products

ProductCVEsExploitedLatest
NetBackup Flex OS3–Sep 18, 2026
NetBackup Administration Console web interface1–Oct 11, 2026

Exploited and recent CVEs

  • CVE-2026-108925 Medium 6.1 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 0.2%
  • CVE-2026-28199 Low 3.3 Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell <0.1%
  • CVE-2026-28198 High 8.8 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell 0.3%
  • CVE-2026-28197 High 8.8 Privilege Escalation via Argument Injection in NetBackup Flex OS Shell 0.7%