CVE-2026-28199CWE-347

CVE-2026-28199

Low · published September 18, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

An authenticated user with access to the NetBackup Flex OS management

shell could read arbitrary files from the underlying operating system by

supplying a specially crafted path argument to a diagnostic command.

Successful exploitation could expose sensitive system configuration and

credential material stored on the appliance.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
4.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00099 · 0.8th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-09-18T16:17Z
References (2)
https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0001.md · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158https://www.cvcn.gov.it/cvcn/cve/CVE-2026-28199 · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
EPSS history
Timeline
  • 20 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 18 SEP 11:19Z
    Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell
    cvelistv5