Cohesity NetBackup Administration Console web interface vulnerabilities

Latest Cohesity NetBackup Administration Console web interface CVEs

Newest publication first

1. CVE-2026-108925 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

   Published 2026-10-11

   Medium·CVSS 6.1 EPSS 0.21%

   Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2. https://github.com/cohesity/SecAdvisory...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.