ZDI-CAN-29232: ZDI-26-856: Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadEvolveLicense script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92195.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the affected Quest Foglight for Databases installation. No user interaction is required.
What privileges could successful exploitation provide?
Successful exploitation can allow arbitrary code execution in the context of SYSTEM, giving the attacker high-impact access to the affected host.
What component is involved in the vulnerable path handling?
The flaw is in the loadEvolveLicense script, which does not properly validate a user-supplied path before using it in file operations.