Quest Foglight for Databases missing authentication enables remote code execution
Original title: ZDI-26-854: Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability
ForgeMBeanServerSupport flaw enables unauthenticated remote code execution on Quest Foglight for Databases.
ZDI published an advisory for Quest Foglight for Databases. The ForgeMBeanServerSupport missing authentication flaw lets remote attackers execute arbitrary code without credentials. ZDI assigned CVSS 9.8 and CVE-2026-92188.
- Missing authentication in ForgeMBeanServerSupport allows remote code execution
- ZDI assigned CVSS rating of 9.8
- CVE-2026-92188 assigned
Impact: unauthenticated remote code execution
- CVEs
- CVE-2026-92188
- Vendors
- Quest
- Products
- Foglight for Databases
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92188 | Missing Authentication RCE in Quest Foglight for Databases ForgeMBeanServerSupport | 9.8 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.