Read the docs
TI-2026-84898 Aliases CVE-2026-92191GHSA-5gcq-m7cr-2w56

Quest Foglight for Databases runScript allows code execution

Priority MEDIUM 41CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

Quest Foglight for Databases from 8.2.0 is affected. The runScript function does not perform proper authorization checks before allowing access to its functionality (CWE-863). A remote attacker with low privileges and valid authentication can execute code in the context of SYSTEM.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the runScript function. The issue results from incorrect authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29192.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00509 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuestFoglight for Databases8.2.0—No fix listedCNA
  • Foglight for Databases VendorQuest Affected 8.2.0 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for Quest Foglight for Databases.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Timeline

  1. 2026-11-04 Threatist record created from CVE-2026-92191
  2. 2026-11-04 Alias added: GHSA-5gcq-m7cr-2w56
  3. 2026-11-05 Priority changed: MEDIUM → LOW
  4. 2026-11-06 CISA SSVC decision points changed
  5. 2026-11-06 Priority changed: LOW → MEDIUM

References

Other 1

  • TI-2025-23985 Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before… KEVCVSS 3.1CRITICAL 10.0
  • TI-2018-07906 The '/common/download_agent_installer.php' script in the Quest KACE System Management… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-04921 The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust… CVSS 2.0HIGH 10.0
  • TI-2018-01077 Stack-based buffer overflow in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-12724 SQL injection in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-04330 Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows… CVSS 3.0CRITICAL 9.8
See all 166 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences