PT-2026-52145 · Quest · Netvault Backup

Published 2026-06-24 · Updated 2026-06-25 · CVE-2026-9780

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quest NetVault Backup (affected versions not specified)

Description An authentication bypass issue exists within the 'addclient3' webpage due to improper validation of user-supplied data. This allows remote attackers to inject arbitrary scripts, requiring the target user to visit a malicious page or open a malicious file. This flaw can be combined with other issues to execute arbitrary code in the context of SYSTEM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-9780

ZDI-26-369

Affected Products

Netvault Backup

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-9780 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-369 · Security Note
• https://support.quest.com/technical-documents/netvault/14.0.2/release-notes#TOPIC-2338529 · Vendor Advisory