ZDI-26-858: Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the paFnUploadFileAndCreateInfo script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92186.
— ZDI
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be able to authenticate to an affected Quest Foglight for Databases installation and reach the vulnerable paFnUploadFileAndCreateInfo functionality remotely.
What level of access can successful exploitation provide?
Successful exploitation can allow arbitrary code execution in the context of SYSTEM, with high impact to confidentiality, integrity, and availability.
What is the underlying exploitation mechanism?
The paFnUploadFileAndCreateInfo script does not properly validate a user-supplied path before using it in file operations. An authenticated attacker can use this directory traversal condition to achieve code execution.