Medium severity6.1NVD Advisory· Published Oct 11, 2026

CVE-2026-108925

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface.

This issue affects NetBackup Administration Console web interface: versions before 11.2.

https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0002.md

Affected products

Cohesity/NetBackup Administration Consolellm-create
Range: <11.2
Cohesity/NetBackup Flex OSllm-fuzzy
Range: <11.2

Patches

Vulnerability mechanics

References

www.gov.il/en/departments/dynamiccollectors/cve_advisories_listingnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000