OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-28197

HIGH · CVSS 8.8 EPSS 0.67% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell can exploit a vulnerability by providing specially crafted input to execute arbitrary code with root-level permissions. This allows the attacker to gain unrestricted control over the Flex appliance host and all hosted containers, severely compromising confidentiality, integrity, and availability. Organizations using NetBackup Flex should prioritize patching this vulnerability to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-28197
Severity
HIGH
CVSS
8.8
EPSS
0.67%

Original NVD Description

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a privileged administrative command, causing it to execute arbitrary code with root-level permissions. Successful exploitation grants the attacker unrestricted control over the Flex appliance host and all hosted containers, fully compromising confidentiality, integrity, and availability.