PT-2026-52143 · Quest · Netvault Backup

Published 2026-06-24 · Updated 2026-06-25 · CVE-2026-7569

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup (affected versions not specified)

Description An authentication bypass issue exists within the 'viewclient' webpage due to improper validation of user-supplied data. This allows remote attackers to inject arbitrary scripts, provided the target user visits a malicious page or opens a malicious file. This flaw can be combined with other issues to execute arbitrary code in the context of SYSTEM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-7569

ZDI-26-377

Affected Products

Netvault Backup

References · 3

• https://zerodayinitiative.com/advisories/ZDI-26-377 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-7569 · Security Note
• https://support.quest.com/technical-documents/netvault/14.0.2/release-notes#TOPIC-2338529 · Vendor Advisory