Read the docs
TI-2026-84905 Aliases CVE-2026-92199GHSA-8hjp-7hwg-3f4j

Hardcoded key in Quest Foglight for Databases allows escalation

Priority LOW 35CWE-321Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-321.

Summary

Quest Foglight for Databases versions from 8.2.0 are affected. The symmetricDecrypt method in EncryptionUtil uses a hardcoded cryptographic key (CWE-321), which lets a local attacker escalate privileges. An attacker must first be able to run low-privileged code on the target system, and then can execute arbitrary code in the context of SYSTEM.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the symmetricDecrypt method. The issue results from the use of a hard-coded cryptographic key. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-29967.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00077 0th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuestFoglight for Databases8.2.0—No fix listedCNA
  • Foglight for Databases VendorQuest Affected 8.2.0 Fixed in — No fix listed CNA

Remediation

No fixed version is listed for Quest Foglight for Databases.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Timeline

  1. 2026-11-04 Threatist record created from CVE-2026-92199
  2. 2026-11-04 Alias added: GHSA-8hjp-7hwg-3f4j
  3. 2026-11-05 Priority changed: MEDIUM → LOW
  4. 2026-11-06 CISA SSVC decision points changed

References

Other 1

  • TI-2025-23985 Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before… KEVCVSS 3.1CRITICAL 10.0
  • TI-2018-07906 The '/common/download_agent_installer.php' script in the Quest KACE System Management… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-04921 The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust… CVSS 2.0HIGH 10.0
  • TI-2018-01077 Stack-based buffer overflow in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-12724 SQL injection in Quest NetVault Backup CVSS 3.0CRITICAL 9.8
  • TI-2017-04330 Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows… CVSS 3.0CRITICAL 9.8
See all 166 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences