NETVAULT BACKUP · CVE-2026-13270 · Vendor
FIX → 14.1.3
Quest NetVault Backup's nvpmgr service, listening on UDP port 20031 by default, mishandles user-supplied data and causes an integer underflow before a buffer allocation. A remote unauthenticated attacker can trigger a denial-of-service condition on the backup server.
first public Nov 12, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running Quest NetVault Backup (server or client; Windows and Linux) at a version before 14.1.3 where the nvpmgr service on UDP 20031 can be reached over the network. No authentication is needed, and the effect is a crash/denial of service of the backup service, not code execution. Installations that keep UDP 20031 firewalled to trusted backup hosts, or already run 14.1.3+, can skip it.
Not affected if no-network-exposure, udp-20031-blocked
Who cares linux, quest-netvault-backup, self-hosted, windows
Upgrade to 14.1.3
Upgrade NetVault Backup to 14.1.3 or later (per ZDI-26-889; Quest release notes list Enhanced Denial-of-service protection NV-5190/NV-5191 in ).
Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the nvpmgr service, which listens on UDP port 20031 by default. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28744.
This page as .md · .json · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
14.1.3NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.