Quest NetVault Backup nvpmgr flaw allows unauthenticated remote denial of service
Original title: ZDI-26-889: Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability
ZDI scores the integer underflow CVE-2026-13270 at 7.5 and does not name a fix.
The Zero Day Initiative published ZDI-26-889, an integer underflow in the nvpmgr component of Quest NetVault Backup. Remote attackers can cause a denial of service without authenticating. ZDI assigned CVSS 7.5 and CVE-2026-13270. Affected versions and a patch are not stated.
Unconfirmed: Affected versions and whether a patch exists are not stated.
- The advisory ID is ZDI-26-889 and the CVE is CVE-2026-13270.
- ZDI assigned a CVSS rating of 7.5.
- Authentication is not required to trigger the denial of service.
Impact: unauthenticated remote denial of service
| Product | Affected |
|---|---|
| Quest NetVault Backup | — |
- CVEs
- CVE-2026-13270
- Vendors
- Quest
- Products
- NetVault Backup
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-13270 | — | — | — |
From the original article
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.