ZDI-CAN-29889: ZDI-26-866: Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability

Published Nov 3, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the renderTemplateString method. The issue results from the lack of proper validation of a user-supplied string before processing it with the template engine. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.

Other sources

— ZDI

Affected Software

1 affected component

Quest Foglight for Databases

Event History

Nov 3, 2026

Advisory Published

via ZDI·12:00 AM

Data Sourced

via ZDI·12:00 AM

DescriptionSeverityAffected Software

Advisory Published

via ZDI·06:00 AM

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authenticated to the affected Quest Foglight for Databases installation. The vulnerability is remotely exploitable and does not require user interaction.

What privileges could successful exploitation provide?

Successful exploitation can allow arbitrary code execution in the context of SYSTEM. This can result in full compromise of confidentiality, integrity, and availability on the affected system.

What input is involved in the vulnerable behavior?

The issue is in the renderTemplateString method, where a user-supplied string is processed by a template engine without proper validation. An authenticated attacker can supply crafted template content to trigger code execution.

ZDI-CAN-29889: ZDI-26-866: Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What privileges could successful exploitation provide?

What input is involved in the vulnerable behavior?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What privileges could successful exploitation provide?

What input is involved in the vulnerable behavior?