OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-28199

LOW · CVSS 3.3 EPSS 0.10% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Authenticated users with access to the NetBackup Flex OS management shell can exploit a vulnerability by providing a specially crafted path argument to a diagnostic command, allowing them to read arbitrary files from the underlying operating system. This could lead to the exposure of sensitive system configurations and credential material. Organizations using NetBackup Flex OS should prioritize remediation to mitigate potential data leaks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-28199
Severity
LOW
CVSS
3.3
EPSS
0.10%

Original NVD Description

An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential material stored on the appliance.