CVE-2026-13270 is an integer underflow vulnerability in the nvpmgr service of Quest NetVault Backup. This flaw allows unauthenticated remote attackers to cause a denial-of-service (DoS) by sending specially crafted data to the service listening on UDP port 20031. The vulnerability arises from improper validation of user input leading to an integer underflow before buffer allocation.