# CVE-2026-13270: Quest NetVault Backup nvpmgr integer underflow denial-of-service

Source: https://junglewise.ai/threats/cve-2026-13270-quest-netvault-backup-nvpmgr-integer-underflow-denial-of-service  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-12. Updated: 2026-11-12  
License: CC BY 4.0 with a link back

CVE-2026-13270 · Severity: high · CVSS 7.5 · Published 2026-11-12

Quest NetVault Backup is a centralized backup management system used by enterprises to protect critical data. A flaw in the nvpmgr service allows remote attackers without authentication to crash the backup system by sending specially crafted UDP packets, disrupting backup operations and potentially causing data protection failures.

Technologies: [Quest NetVault Backup](https://junglewise.ai/threats/technologies/netvault-backup). Vendors: [Quest](https://junglewise.ai/threats/vendors/quest).

## Quick answers

**Is CVE-2026-13270 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-13270 being exploited in the wild.

**How severe is CVE-2026-13270?** High severity, with a CVSS score of 7.5, published 12 November 2026.

**Which products and versions are affected?** Quest NetVault Backup.

**Is there a fix for CVE-2026-13270?** Yes: fixed in NetVault Backup 14.1.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-13270 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-13270?** Check whether you run Quest NetVault Backup. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in NetVault Backup 14.1.3

## Technical details

An integer underflow vulnerability exists in the nvpmgr UDP service (port 20031) due to insufficient validation of user-supplied input, leading to improper buffer allocation. An unauthenticated remote attacker can send a crafted UDP packet to trigger the underflow and cause a denial-of-service condition. The vulnerability has been fixed in version 14.1.3.

## Affected products

- Quest NetVault Backup

## Timeline

- 2026-04-23: disclosed: Vulnerability reported to vendor
- 2026-11-06: advisory: Coordinated public release of advisory

## References

- [https://www.zerodayinitiative.com/advisories/ZDI-26-889/](https://www.zerodayinitiative.com/advisories/ZDI-26-889/)

## Related threats

- [Quest NetVault Backup numeric truncation error denial of service](https://junglewise.ai/threats/cve-2026-13269-quest-netvault-backup-stnzcreatekey-numeric-truncation-error)
- [Quest NetVault Backup command injection in NVBULogDaemon](https://junglewise.ai/threats/cve-2026-9787-quest-netvault-backup-command-injection-in-nvbulogdaemon)
- [Quest NetVault Backup SQL injection in NVBUDashboard](https://junglewise.ai/threats/cve-2026-9786-quest-netvault-backup-sql-injection-in-nvbudashboard)
- [Quest NetVault Backup SQL injection in NVBULibrarySlot](https://junglewise.ai/threats/cve-2026-9785-quest-netvault-backup-sql-injection-in-nvbulibraryslot)
- [Quest NetVault Backup SQL injection in NVBULibraryPort](https://junglewise.ai/threats/cve-2026-9784-quest-netvault-backup-sql-injection-in-nvbulibraryport)