CVE-2026-13269High· 7.5▾ Abyssal0dayQuest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authenti…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 41.3 · likelihood 0.2 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.8%
Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the StnzCreateKey function. The issue results from the lack of proper validation of user-supplied data, which can result in a numeric truncation error before allocating a buffer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-28743.
netvault_backup 14.0.2.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-13270High· 7.5Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability
CVE-2026-92196High· 7.2Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability
CVE-2026-92200High· 7.8Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
CVE-2026-92199High· 7.8Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
CVE-2026-92198High· 8.2Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability
CVE-2026-92185High· 7.2Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability