CVE-2026-28197

Summary

This vulnerability allows a low-privileged user to execute arbitrary code with root permissions by supplying crafted input to a privileged administrative command in NetBackup Flex OS, leading to full control over the appliance and hosted containers.

Exploitability

Exploitation requires access to the NetBackup Flex OS management shell and knowledge of a specific crafted input, making it moderately difficult.

Blast radius

If exploited, the attacker gains unrestricted control over the Flex appliance host and all hosted containers, fully compromising the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected administrative command or restrict access to the NetBackup Flex OS management shell to low-privileged users.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.