ZDI-26-889: Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability
Published Nov 6, 2026
·Updated
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-13270.
Event History
Nov 6, 2026
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
Does exploiting this issue require credentials or prior access?
No. The vulnerability can be exploited remotely without authentication.
2
What is the expected impact of successful exploitation?
A remote attacker can cause a denial-of-service condition on affected Quest NetVault Backup installations.
3
How severe is this issue according to the available advisory data?
The advisory assigns a CVSS rating of 7.5 and identifies the issue as CVE-2026-13270.