Read the docs
TI-2026-84860 Aliases CVE-2026-92190GHSA-3xxj-hwx3-jcvq

Remote code execution in Quest Foglight for Databases

Priority MEDIUM 50CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

Quest Foglight for Databases from 8.2.0 contains a deserialization of untrusted data flaw (CWE-502) in the baseRmiServiceExporter bean. The bean does not validate user-supplied data before deserializing it. An unauthenticated remote attacker can execute code in the context of SYSTEM.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the baseRmiServiceExporter bean. The issue results from the lack of proper validation of user-supplied data prior to deserializing it. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29170.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00621 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuestFoglight for Databases8.2.0—No fix listedCNA
  • Foglight for Databases VendorQuest Affected 8.2.0 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for Quest Foglight for Databases.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Timeline

  1. 2026-11-03 Threatist record created from CVE-2026-92190
  2. 2026-11-04 Alias added: GHSA-3xxj-hwx3-jcvq
  3. 2026-11-06 CISA SSVC decision points changed
  4. 2026-11-07 EPSS moved to the 50th–90th percentile

References

Other 1

  • TI-2025-23985 Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before… KEVCVSS 3.1CRITICAL 10.0
  • TI-2018-07906 The '/common/download_agent_installer.php' script in the Quest KACE System Management… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-04921 The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust… CVSS 2.0HIGH 10.0
  • TI-2018-01077 Stack-based buffer overflow in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-12724 SQL injection in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-04330 Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows… CVSS 3.0CRITICAL 9.8
See all 166 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences