CVE-2026-28198: Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted root shell with full control over the Flex appliance host and all hosted containers, completely compromising confidentiality, integrity, and availability.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
NetBackup Flex OS deployments are exposed where a low-privileged authenticated user can access the Flex OS management shell. The issue affects the appliance host and all containers hosted on it after successful exploitation.
What does an attacker need to exploit it?
An attacker needs authenticated access as a low-privileged user to the NetBackup Flex OS management shell. They must supply a specially formed access credential to a privileged support command; no user interaction is required.
What is the impact of successful exploitation?
Successful exploitation provides an unrestricted root shell. This gives the attacker full control of the Flex appliance host and its hosted containers, with complete compromise of confidentiality, integrity, and availability.