Vulnerabilities

TI-2026-84902 CVE-2026-92196 · GHSA-p2xh-pch3-cgpp

Quest Foglight for Databases renderTemplateString Template Injection RCE

LOW 35

Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00629 Published 2026-11-03 No fix listed CWE-1336

TI-2026-84906 CVE-2026-92200 · GHSA-fp6h-wx5h-9qq6

Local privilege escalation in Quest Foglight for Databases

LOW 35

Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-11-03 No fix listed CWE-732

TI-2026-84904 CVE-2026-92198 · GHSA-xrxm-r7j2-xvh7

XML external entity injection in Quest Foglight for Databases

MEDIUM 47

Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.02798 Published 2026-11-03 No fix listed CWE-611

TI-2026-84905 CVE-2026-92199 · GHSA-8hjp-7hwg-3f4j

Hardcoded key in Quest Foglight for Databases allows escalation

LOW 35

Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00077 Published 2026-11-03 No fix listed CWE-321

TI-2026-84895 CVE-2026-92185 · GHSA-xjx6-jx92-chxm

XML external entity processing in Quest Foglight for Databases

MEDIUM 41

Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.2 Network No auth No interaction EPSS 0.01888 Published 2026-11-03 No fix listed CWE-611

TI-2026-84897 CVE-2026-92189 · GHSA-hhv6-rvqm-3f2h

Path control flaw in Quest Foglight for Databases allows remote code execution

MEDIUM 50

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2026-11-03 No fix listed CWE-73

TI-2026-84903 CVE-2026-92197 · GHSA-j4pm-v9cx-f945

Path traversal in Quest Foglight for Databases enables code execution

MEDIUM 43

Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84898 CVE-2026-92191 · GHSA-5gcq-m7cr-2w56

Quest Foglight for Databases runScript allows code execution

MEDIUM 41

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00509 Published 2026-11-03 No fix listed CWE-863

TI-2026-84896 CVE-2026-92186 · GHSA-2pm9-q6rm-q426

Quest Foglight for Databases Directory Traversal Remote Code Execution

MEDIUM 43

Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84900 CVE-2026-92194 · GHSA-mq7w-932h-vw2x

Path traversal in Quest Foglight for Databases enables code execution

MEDIUM 43

Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84901 CVE-2026-92195 · GHSA-v95c-w4h7-j39r

Quest Foglight for Databases flaw allows remote code execution

MEDIUM 43

Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84899 CVE-2026-92192 · GHSA-3fjh-cj77-g2c3

Path traversal in Quest Foglight for Databases enables code execution

MEDIUM 43

Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84859 CVE-2026-92188 · GHSA-vwq7-jm7x-pmjc

Quest Foglight for Databases unauthenticated remote code execution

MEDIUM 50

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2026-11-03 No fix listed CWE-306

TI-2026-84861 CVE-2026-92193 · GHSA-f6vp-243g-g83m

External control of file path in Quest Foglight for Databases

LOW 33

Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02131 Published 2026-11-03 No fix listed CWE-73

TI-2026-84858 CVE-2026-92187 · GHSA-x3wx-6723-mpfq

Path traversal in Quest Foglight for Databases enables code execution

MEDIUM 43

Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01273 Published 2026-11-03 No fix listed CWE-22

TI-2026-84860 CVE-2026-92190 · GHSA-3xxj-hwx3-jcvq

Remote code execution in Quest Foglight for Databases

MEDIUM 50

Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2026-11-03 No fix listed CWE-502

TI-2021-12041 CVE-2021-32088 · GHSA-wr85-vcm8-q7f4

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 49

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2026-07-27 No fix listed CWE-384

TI-2021-12040 CVE-2021-32087 · GHSA-fm6r-8jgr-6mvw

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 41

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2026-07-27 No fix listed CWE-798

TI-2021-12039 CVE-2021-32086 · GHSA-5h6h-pp43-x3rj

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 49

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00329 Published 2026-07-27 No fix listed CWE-321

TI-2021-12038 CVE-2021-32085 · GHSA-rvhw-g4g5-9g93

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 41

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2026-07-27 No fix listed CWE-798

TI-2021-12037 CVE-2021-32084 · GHSA-xvvc-9r93-427f

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

MEDIUM 50

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2026-07-27 No fix listed CWE-284

TI-2026-06655 CVE-2026-7569 · GHSA-j45r-jgvc-p3cw

Cross-site scripting in Quest NetVault Backup

MEDIUM 42

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00935 Published 2026-06-24 No fix listed CWE-79

TI-2026-08578 CVE-2026-9787 · GHSA-g493-6gcx-x935

OS command injection in Quest NetVault Backup

MEDIUM 48

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0549 Published 2026-06-24 No fix listed CWE-78

TI-2026-08577 CVE-2026-9786 · GHSA-qhv7-8f66-468j

SQL injection in Quest NetVault Backup

MEDIUM 42

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00946 Published 2026-06-24 No fix listed CWE-89

TI-2026-08576 CVE-2026-9785 · GHSA-qc3q-wgvh-ww57

SQL injection in Quest NetVault Backup

MEDIUM 42

Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00946 Published 2026-06-24 No fix listed CWE-89

Vulnerabilities

Filters