CVE-2026-108925

MediumCVSS 6.1/10Last modified Oct 16, 2026

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface.

This issue affects NetBackup Administration Console web interface: versions before 11.2.

https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0002.md

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80

Affected software

No affected versions have been published.

Timeline

Published: Oct 11, 2026
Last modified: Oct 16, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1089266.3A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebap CVE-2026-1089276.3A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the fil CVE-2026-1089286.3A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the fi CVE-2026-1089299.9A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the compon CVE-2026-108938.8Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious netwo CVE-2026-1089302.7A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_lis CVE-2026-1089314.3A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component D CVE-2026-1089324.3A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the componen CVE-2026-1089332.4A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation l CVE-2026-1089342.4A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform CVE-2026-1089352.4A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw CVE-2026-1089362.4A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the compone