ZDI-CAN-29169: ZDI-26-861: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the writeTopologySectionToFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-92189.
— ZDI
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
A remote attacker can exploit it without authentication or user interaction. The attack complexity is rated low.
What level of access could an attacker gain?
Successful exploitation allows arbitrary code execution in the context of SYSTEM, with high impact to confidentiality, integrity, and availability.
What is the underlying attack condition?
The flaw is in the writeTopologySectionToFile method, which does not properly validate a user-supplied path before using it in file operations.