CVE-2026-92199
HighCVSS 7.8Summary
Quest Foglight for Databases uses a hard-coded cryptographic key within the symmetricDecrypt method. An attacker able to execute low-privileged code can exploit this flaw to escalate privileges and execute arbitrary code as SYSTEM.
Risk Assessment
A local attacker can gain full control of the host, resulting in complete compromise of confidentiality, integrity and availability of the Foglight installation.
Recommendation
Update Quest Foglight for Databases to the vendor-patched version and restrict the ability to run low-privileged code on Foglight hosts.
Other vulnerabilities in Quest Foglight for Databases
See all- CVE-2026-92200High
An incorrect permission assignment vulnerability in Quest Foglight for Databases allows local privilege escalation. The flaw exists in the product installer due to incorrect permissions on a folder used by the product.
- CVE-2026-92198High
The getSource method in Quest Foglight for Databases improperly restricts XML External Entity (XXE) references. An unauthenticated remote attacker can cause the XML parser to access an attacker-specified URI and disclose information in the context of the application.
- CVE-2026-92197High
The unzipFile method in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
- CVE-2026-92196High
The renderTemplateString method in Quest Foglight for Databases fails to properly validate a user-supplied string before processing it with the template engine, resulting in server-side template injection. An authenticated remote attacker can execute arbitrary code as SYSTEM.
- CVE-2026-92195High
The loadEvolveLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
- CVE-2026-92194High
The loadManageServerLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
- CVE-2026-92193Medium
A vulnerability in the FileServlet class of Quest Foglight for Databases allows an authenticated remote attacker to disclose sensitive information. The issue results from the lack of proper validation of a user-supplied path before it is used in file operations.
- CVE-2026-92192High
The installLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
- CVE-2026-92191High
The runScript function in Quest Foglight for Databases performs incorrect authorization before allowing access to functionality. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
- CVE-2026-92187High
The extractAndCreateUploadInfoList method in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.
Original NVD description (English source)
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the symmetricDecrypt method. The issue results from the use of a hard-coded cryptographic key. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-29967.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS