CVE-2026-9782: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the processing of NVBUDeviceDrive JSON-RPC messages. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-27633.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Because the flaw is in processing of NVBUDeviceDrive JSON-RPC messages, restrict network access to the NVBUDeviceDrive JSON-RPC interface so only trusted clients can reach it.
- Compensating control
Implement compensating controls for Quest NetVault Backup by blocking or limiting inbound access to the vulnerable JSON-RPC endpoint from untrusted networks (e.g., via firewall/ACL), even though authentication is required but can be bypassed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9782?
The severity of CVE-2026-9782 is rated as high with a score of 8.8.
How do I fix CVE-2026-9782?
To fix CVE-2026-9782, users should update to the latest version of Quest NetVault Backup that addresses this vulnerability.
What kind of vulnerability is CVE-2026-9782?
CVE-2026-9782 is an SQL Injection vulnerability that can lead to remote code execution.
Can CVE-2026-9782 be exploited without authentication?
No, exploitation of CVE-2026-9782 requires authentication to the affected system.
What impacts does CVE-2026-9782 have on affected systems?
CVE-2026-9782 allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup.