Quest Foglight for Databases Hardcoded Encryption Key Allows Local Privilege Escalation
Local attackers can escalate privileges after obtaining low-privileged code execution (CVE-2026-92199)
Stories per day · 30 days
2 RSS
Relatedauthentication-bypass1cwe-3211foglight1fortinet1fortisandbox1privilege-escalation1psirt1quest1
5 stories, newest first · one card per story
Stories tagged #hardcoded-key
Fabric API Authentication bypass
A hard-coded key in the FortiSandbox API lets unauthenticated attackers reach some endpoints.
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds patched CVE-2026-28326 (CVSS 8.8), a hard-coded-key flaw enabling unauthenticated remote code execution in Access Rights Manager 2026.2 and prior.
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
Unauthenticated attackers exploit CVE-2026-89026 in Issabel PBX via forged JWT tokens to run OS commands; exploitation observed since September 9.
2
Wärtsilä FOS-Onboard
CISA advisory: two hardcoded cryptographic key flaws in Wärtsilä FOS-Onboard 5.07.0923.01 (CVSS 9.0/9.1) could allow unauthorized updates, code execution, and credential theft.
1