Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Quest Foglight for Databases runScript incorrect authorization RCE

Original title: ZDI-26-859: Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
Part of a story covered by 16 sourcesZDI Publishes Multiple Advisories for Quest Foglight for Databases VulnerabilitiesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

ZDI-26-859 CVSS 8.8 flaw allows remote code execution on authenticated Quest Foglight for Databases

Quest Foglight for Databases installations are affected by this incorrect authorization vulnerability. Remote attackers can execute arbitrary code after authentication. ZDI assigned CVSS 8.8 and CVE-2026-92191.

Key facts
  • CVSS rating of 8.8
  • authentication required to exploit
  • arbitrary code execution possible
Security assessment · AI, from the articleNo known exploitation

Impact: remote code execution via incorrect authorization

Analyze CVE-2026-92191 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-92191
Tags
quest-foglightrceauthorization
Vendors
Quest
Products
Foglight for Databases

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-92191
Authenticated RCE in Quest Foglight for Databases via runScript
8.8—

From the original article

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.