Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Quest Foglight for Databases Deserialization Flaw Enables Remote Code Execution

Original title: ZDI-26-851: Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
Part of a story covered by 16 sourcesZDI Publishes Multiple Advisories for Quest Foglight for Databases VulnerabilitiesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Unauthenticated remote attackers can execute arbitrary code in Quest Foglight for Databases via a deserialization vulnerability (CVE-2026-92190).

The ZDI disclosed a deserialization vulnerability in Quest Foglight for Databases. This flaw allows remote code execution without any authentication. The vendor assigned a CVSS rating of 9.8 to the issue.

Security assessment · AI, from the articleNo known exploitation

Impact: Unauthenticated remote code execution

Analyze CVE-2026-92190 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-92190
Tags
questfoglightdatabasesdeserializationrceunauthenticated
Vendors
Quest
Products
Foglight for Databases

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-92190
Unauthenticated RCE in Quest Foglight for Databases baseRmiServiceExporter
9.8—

From the original article

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.