CVE-2026-28197

An authenticated, low-privileged user with access to the NetBackup Flex 
OS management shell could supply a specially crafted input to a 
privileged administrative command, causing it to execute arbitrary code 
with root-level permissions. Successful exploitation grants the attacker
 unrestricted control over the Flex appliance host and all hosted 
containers, fully compromising confidentiality, integrity, and 
availability.