Quest Foglight for Databases writeTopologySectionToFile Flaw Enables Remote Code Execution
Original title: ZDI-26-861: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
Remote attackers can execute arbitrary code without authentication (CVE-2026-92189)
ZDI published an advisory for a vulnerability in Quest Foglight for Databases. The flaw allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8 and CVE-2026-92189.
- Remote code execution possible
- No authentication required
- CVSS 9.8
- Affects Quest Foglight for Databases
Impact: remote code execution
| Product | Affected |
|---|---|
| Quest Foglight for Databases | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92189 | Unauthenticated RCE in Quest Foglight for Databases | 9.8 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.