CVE-2026-92193

An incorrect permission assignment vulnerability in Quest Foglight for Databases allows local privilege escalation. The flaw exists in the product installer due to incorrect permissions on a folder used by the product.

Quest Foglight for Databases uses a hard-coded cryptographic key within the symmetricDecrypt method. An attacker able to execute low-privileged code can exploit this flaw to escalate privileges and execute arbitrary code as SYSTEM.

The getSource method in Quest Foglight for Databases improperly restricts XML External Entity (XXE) references. An unauthenticated remote attacker can cause the XML parser to access an attacker-specified URI and disclose information in the context of the application.

The unzipFile method in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.

The renderTemplateString method in Quest Foglight for Databases fails to properly validate a user-supplied string before processing it with the template engine, resulting in server-side template injection. An authenticated remote attacker can execute arbitrary code as SYSTEM.

The loadEvolveLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.

The loadManageServerLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.

The installLicense script in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.

The runScript function in Quest Foglight for Databases performs incorrect authorization before allowing access to functionality. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.

The extractAndCreateUploadInfoList method in Quest Foglight for Databases lacks proper validation of a user-supplied path before file operations, enabling directory traversal. An authenticated remote attacker can exploit this to execute arbitrary code as SYSTEM.