CVE-2026-13270

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup (affected versions not specified)

Description A flaw in the nvpmgr service, which listens on UDP port 20031 by default, allows remote attackers to cause a denial-of-service condition. The issue occurs due to insufficient validation of user-supplied data, leading to an integer underflow—a condition where a subtraction results in a value smaller than the minimum representable value for that data type—before a buffer is allocated. No authentication is required to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.