Quest Foglight for Databases Hardcoded Encryption Key Allows Local Privilege Escalation
Local attackers can escalate privileges after obtaining low-privileged code execution (CVE-2026-92199)
50
Product
Foglight for Databases
- Mentions · 7d16
- Mentions · 30d16
- All mentions16
- First seenNov 3, 2026
- Last mentioned1d ago
Timeline
16 articles · newest firstQuest Foglight for Databases runScript incorrect authorization RCE
ZDI-26-859 CVSS 8.8 flaw allows remote code execution on authenticated Quest Foglight for Databases
50
Quest Foglight for Databases directory traversal enables remote code execution
Authentication required to exploit the directory traversal flaw in Quest Foglight for Databases.
50
Quest Foglight for Databases permission assignment flaw enables local privilege escalation
Local privilege escalation vulnerability in Quest Foglight for Databases.
40
Quest Foglight for Databases AbstractParser Flaw Enables Remote Information Disclosure
Remote attackers can disclose sensitive information without authentication (CVE-2026-92185)
40
Quest Foglight for Databases directory traversal enables remote code execution
Directory traversal vulnerability allows remote attackers to execute arbitrary code; authentication is required.
65
Quest Foglight for Databases Deserialization Flaw Enables Remote Code Execution
Unauthenticated remote attackers can execute arbitrary code in Quest Foglight for Databases via a deserialization vulnerability (CVE-2026-92190).
55
Quest Foglight for Databases loadManageServerLicense directory traversal RCE
ZDI-26-857 CVSS 8.8 flaw allows remote code execution on authenticated Quest Foglight for Databases
50
Quest Foglight for Databases missing authentication enables remote code execution
ForgeMBeanServerSupport flaw enables unauthenticated remote code execution on Quest Foglight for Databases.
70
Quest Foglight for Databases getSource Flaw Enables Remote Information Disclosure
Remote attackers can initiate arbitrary server-side requests without authentication (CVE-2026-92198)
50
Quest Foglight for Databases installLicense directory traversal enables remote code execution
InstallLicense directory traversal flaw allows remote arbitrary code execution; authentication required.
65
Quest Foglight for Databases template injection enables remote code execution
Server-side template injection in Quest Foglight for Databases allows remote code execution.
45
Quest Foglight for Databases FileServlet path disclosure vulnerability
FileServlet external control of file path information disclosure allows sensitive data exposure.
50
Quest Foglight for Databases writeTopologySectionToFile Flaw Enables Remote Code Execution
Remote attackers can execute arbitrary code without authentication (CVE-2026-92189)
60
Quest Foglight for Databases unzipFile directory traversal RCE
ZDI-26-860 CVSS 8.8 flaw allows remote code execution on authenticated Quest Foglight for Databases
50
Quest Foglight for Databases paFnUploadFileAndCreateInfo directory traversal RCE
ZDI-26-858 CVSS 8.8 flaw allows remote code execution on authenticated Quest Foglight for Databases
50
Related CVEs
by mentions- Unauthenticated RCE in Quest Foglight for Databases baseRmiServiceExporter
- Missing Authentication RCE in Quest Foglight for Databases ForgeMBeanServerSupport
- Unauthenticated RCE in Quest Foglight for Databases
- Authenticated RCE in Quest Foglight for Databases via runScript
- Directory Traversal RCE in Quest Foglight for Databases
- Directory Traversal RCE in Quest Foglight for Databases installLicense
- XML External Entity Information Disclosure in Quest Foglight for Databases
- Local Privilege Escalation in Quest Foglight for Databases Installer
- RCE in Quest Foglight for Databases renderTemplateString
- XXE Information Disclosure in Quest Foglight for Databases
Appears with
- Questvendor · 16
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.