Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-108925 EUVD-2026-97121GHSA-qc8q-qx52-mgwm

Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Published Oct 11, 2026 · Updated Oct 16, 2026 · Assigned by INCD

Vendor: Cohesity Product: NetBackup Administration Console web interface

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface.

This issue affects NetBackup Administration Console web interface:  versions before 11.2.

https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0002.md

Affected products

VendorProductAffectedFixed
Cohesity NetBackup Administration Console web interface versions before 11.2 —

References