CVE-2026-28198CWE-347

CVE-2026-28198

High · published September 18, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

An authenticated, low-privileged user with access to the NetBackup Flex

OS management shell could bypass the cryptographic signature

verification step of a privileged support command by supplying a

specially formed access credential. Successful exploitation grants the

attacker an unrestricted root shell with full control over the Flex

appliance host and all hosted containers, completely compromising

confidentiality, integrity, and availability.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.4 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-09-18T16:17Z
References (2)
https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0001.md · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158https://www.cvcn.gov.it/cvcn/cve/CVE-2026-28198 · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
EPSS history
Timeline
  • 20 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 18 SEP 11:12Z
    Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell
    cvelistv5