CVE-2026-9781: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the processing of NVBURASDevice JSON-RPC messages. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-27648.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate remote exploitation of Quest NetVault Backup NVBURASDevice JSON-RPC SQL injection by restricting network access to the NVBURASDevice JSON-RPC interface so only trusted sources can reach it.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9781?
The severity of CVE-2026-9781 is high, with a CVSS score of 8.8.
What type of vulnerability is CVE-2026-9781?
CVE-2026-9781 is an SQL Injection vulnerability that allows remote code execution.
How do I fix CVE-2026-9781?
To mitigate CVE-2026-9781, ensure that you apply the latest security patches provided by Quest for NetVault Backup.
Who is affected by CVE-2026-9781?
CVE-2026-9781 affects installations of Quest NetVault Backup that are vulnerable to this SQL Injection flaw.
Can CVE-2026-9781 be exploited without authentication?
No, exploitation of CVE-2026-9781 requires authentication to the affected installation.