CVE-2026-28199: Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential material stored on the appliance.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user who has access to the NetBackup Flex OS management shell can exploit it. The attack requires local access and low privileges; no user interaction is required.
What does an attacker need to do to access files?
The attacker must provide a specially crafted path argument to a diagnostic command in the management shell. This can allow reading arbitrary files from the underlying operating system.
What information could be exposed?
Successful exploitation could disclose sensitive system configuration files and credential material stored on the appliance.