netvault backup vulnerabilities and fixes

Recent CVEs affecting netvault backup, with upgrade or downgrade steps. 10 tracked.

Also searched as: netvaultbackup.

netvault backup has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-06-25. Highest priority: CVE-2026-9787 (score 54/100).

• CVE-2026-9787 HIGH 8.8 UPGRADE Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability
• CVE-2026-7569 HIGH 8.8 UPGRADE Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability
• CVE-2026-7570 HIGH 8.8 UPGRADE Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9780 HIGH 8.8 UPGRADE Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability
• CVE-2026-9781 HIGH 8.8 UPGRADE Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9782 HIGH 8.8 UPGRADE Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9783 HIGH 8.8 UPGRADE Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9784 HIGH 8.8 UPGRADE Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9785 HIGH 8.8 UPGRADE Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
• CVE-2026-9786 HIGH 8.8 UPGRADE Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

FAQ

How do I fix netvault backup vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is netvault backup being exploited right now?

None of the tracked netvault backup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which netvault backup CVE should I patch first?

CVE-2026-9787 currently ranks highest (54/100): Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability.

← Back to latest CVEs