CVE-2026-9787

Radar advisories

• 2026-06-24 ZDI ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.

Related analysis

• 2026-07-02 Cybersecurity The Control Plane Is the New Perimeter This week's advisories cluster in remote support, backup, storage, AI workflow and SharePoint systems - the control plane. A medium-severity bug there can matter more than a critical bug in something isolated. The perimeter has moved.

Named alongside

• CVE-2026-41264
• CVE-2026-41940
• CVE-2026-45659
• CVE-2026-48558
• CVE-2026-7570

References

• NVD ↗
• CVE.org ↗
• Zero Day Initiative ↗