Quest Foglight for Databases missing authentication enables remote code execution
ForgeMBeanServerSupport flaw enables unauthenticated remote code execution on Quest Foglight for Databases.
70
CVE-2026-92188
Missing Authentication RCE in Quest Foglight for Databases ForgeMBeanServerSupport
- CVSS 3.0
- 9.8 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Quest Foglight for Databases ForgeMBeanServerSupport lacks authentication, allowing remote attackers to execute arbitrary code. The flaw can be triggered over the network without user interaction. Attackers gain full control as SYSTEM on affected systems.
What to do: apply Quest's update for CVE-2026-92188
| Product | Affected |
|---|---|
| Quest Foglight for Databases | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ForgeMBeanServerSupport module. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29168.
- Weakness
- CWE-306
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H