CVE-2023-26789

Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.

• CWE-79
• CWE-79

• https://github.com/IthacaLabs/Veritas-TechnologiesThird Party Advisory
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txtBroken Link
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txtThird Party Advisory
• https://github.com/IthacaLabs/Veritas-TechnologiesThird Party Advisory
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txtBroken Link
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txtThird Party Advisory

Published

Apr 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26780CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injecti…9.8
• CVE-2023-26781SQL injection vulnerability in mccms 2.6 allows remote attac…9.8
• CVE-2023-26782An issue discovered in mccms 2.6.1 allows remote attackers t…6.5
• CVE-2023-26784SQL Injection vulnerability found in Kirin Fortress Machine …9.8
• CVE-2023-26785MariaDB v10.5 was discovered to contain a remote code execut…9.8
• CVE-2023-26788Veritas Appliance v4.1.0.1 is affected by Host Header Inject…6.1
• CVE-2023-2679Data leakage in Adobe connector in Snow Software SPE 9.27.0 …4.3
• CVE-2023-26793libmodbus v3.1.10 has a heap-based buffer overflow vulnerabi…9.8
• CVE-2023-2680This CVE exists because of an incomplete fix for CVE-2021-37…8.2
• CVE-2023-26800Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 …9.8
• CVE-2023-26801LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-L…9.8
• CVE-2023-26802An issue in the component /network_config/nsg_masq.cgi of DC…9.8