Quest Foglight for Databases Hardcoded Encryption Key Allows Local Privilege Escalation
Original title: ZDI-26-863: Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
Local attackers can escalate privileges after obtaining low-privileged code execution (CVE-2026-92199)
ZDI published an advisory for a vulnerability in Quest Foglight for Databases. The flaw allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The ZDI has assigned a CVSS rating of 7.8 and CVE-2026-92199.
- Local privilege escalation possible
- Requires prior low-privileged execution
- CVSS 7.8
- Affects Quest Foglight for Databases
Impact: local privilege escalation
| Product | Affected |
|---|---|
| Quest Foglight for Databases | — |
- CVEs
- CVE-2026-92199
- Vendors
- Quest
- Products
- Foglight for Databases
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92199 | Hardcoded Encryption Key LPE in Quest Foglight for Databases | 7.8 | — |
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.