Quest Foglight for Databases FileServlet path disclosure vulnerability
Original title: ZDI-26-853: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
FileServlet external control of file path information disclosure allows sensitive data exposure.
ZDI published an advisory for Quest Foglight for Databases. The FileServlet vulnerability lets remote attackers disclose sensitive information. Authentication is required. ZDI assigned CVSS 6.5 and CVE-2026-92193.
- FileServlet vulnerability discloses sensitive information
- Authentication required to exploit
- ZDI assigned CVSS rating of 6.5
- CVE-2026-92193 assigned
Impact: information disclosure of sensitive files
- CVEs
- CVE-2026-92193
- Vendors
- Quest
- Products
- Foglight for Databases
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92193 | File Path Disclosure in Quest Foglight for Databases FileServlet | 6.5 | — |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.