Is CVE-2026-108925 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108925?

CVE-2026-108925 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-108925

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2. https://github.com/cohesity/SecAdvisory/blob/master/COH-2026-0002.md