ZDI-CAN-29231: ZDI-26-857: Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability

Published Nov 3, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92194.

Event History

Nov 3, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authenticated to the affected Quest Foglight for Databases installation. The provided information does not identify any additional privilege requirements.

What is the potential impact if exploitation succeeds?

A successful attacker can execute arbitrary code on the affected installation remotely. The advisory assigns the issue a CVSS score of 8.8.

ZDI-CAN-29231: ZDI-26-857: Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?