Quest Foglight for Databases AbstractParser Flaw Enables Remote Information Disclosure
Original title: ZDI-26-862: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
Remote attackers can disclose sensitive information without authentication (CVE-2026-92185)
ZDI published an advisory for a vulnerability in Quest Foglight for Databases. The flaw allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2 and CVE-2026-92185.
- Remote information disclosure possible
- No authentication required
- CVSS 7.2
- Affects Quest Foglight for Databases
Impact: remote information disclosure
| Product | Affected |
|---|---|
| Quest Foglight for Databases | — |
- CVEs
- CVE-2026-92185
- Vendors
- Quest
- Products
- Foglight for Databases
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92185 | XXE Information Disclosure in Quest Foglight for Databases | 7.2 | — |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.