CVE-2026-28198

HighCVSS 8.8/10Last modified Sep 18, 2026

Description

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted root shell with full control over the Flex appliance host and all hosted containers, completely compromising confidentiality, integrity, and availability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

No affected versions have been published.

Timeline

Published: Sep 18, 2026
Last modified: Sep 18, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-281993.3An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system CVE-2026-28207.3A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown process CVE-2026-282017.8An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker t CVE-2026-282046.5Charging station authentication identifiers are publicly accessible via web-based mapping platforms.CVE-2026-282059.8OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain acc CVE-2026-282077.3Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability CVE-2026-282085.9Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor CVE-2026-282097.2FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection CVE-2026-28217.3A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown function of the file CVE-2026-282108.8FreePBX is an open source IP PBX. Prior to versions 16.0.49 and 17.0.7, FreePBX module cdr (Call Data Record) is vulnerable to SQL query inj CVE-2026-282117.8The NVDA Dev & Test Toolbox is an NVDA add-on for gathering tools to help NVDA development and testing. A vulnerability exists in versions 2 CVE-2026-282127.5Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op