{"schema_version":1,"title":"Quest Foglight for Databases vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Quest Foglight for Databases: 0 in the last 7 days and 16 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-92200, was published on 4 November 2026. 16 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0.","url":"https://junglewise.ai/threats/technologies/foglight-for-databases","json_url":"https://junglewise.ai/threats/technologies/foglight-for-databases.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/foglight-for-databases","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":12,"all_time":16,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":16,"last_90_days":16,"last_365_days":16},"latest":[{"cve":"CVE-2026-92200","cvss":7.8,"slug":"cve-2026-92200-quest-foglight-for-databases-incorrect-permission-assignment","title":"Quest Foglight for Databases privilege escalation in installer","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:31.12+00:00","url":"https://junglewise.ai/threats/cve-2026-92200-quest-foglight-for-databases-incorrect-permission-assignment"},{"cve":"CVE-2026-92199","cvss":7.8,"slug":"cve-2026-92199-quest-foglight-for-databases-encryptionutil-hardcoded-encyption","title":"Quest Foglight for Databases hardcoded encryption key privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.97+00:00","url":"https://junglewise.ai/threats/cve-2026-92199-quest-foglight-for-databases-encryptionutil-hardcoded-encyption"},{"cve":"CVE-2026-92198","cvss":8.2,"slug":"cve-2026-92198-quest-foglight-for-databases-getsource-xml-external-entity","title":"Quest Foglight for Databases XXE in getSource method","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.827+00:00","url":"https://junglewise.ai/threats/cve-2026-92198-quest-foglight-for-databases-getsource-xml-external-entity"},{"cve":"CVE-2026-92197","cvss":8.8,"slug":"cve-2026-92197-quest-foglight-for-databases-unzipfile-directory-traversal-remote","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.677+00:00","url":"https://junglewise.ai/threats/cve-2026-92197-quest-foglight-for-databases-unzipfile-directory-traversal-remote"},{"cve":"CVE-2026-92196","cvss":7.2,"slug":"cve-2026-92196-quest-foglight-for-databases-rendertemplatestring-server-side","title":"Quest Foglight for Databases server-side template injection in renderTemplateString","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.523+00:00","url":"https://junglewise.ai/threats/cve-2026-92196-quest-foglight-for-databases-rendertemplatestring-server-side"},{"cve":"CVE-2026-92195","cvss":8.8,"slug":"cve-2026-92195-quest-foglight-for-databases-loadevolvelicense-directory","title":"Quest Foglight for Databases directory traversal remote code execution in loadEvolveLicense","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.39+00:00","url":"https://junglewise.ai/threats/cve-2026-92195-quest-foglight-for-databases-loadevolvelicense-directory"},{"cve":"CVE-2026-92194","cvss":8.8,"slug":"cve-2026-92194-quest-foglight-for-databases-loadmanageserverlicense-directory","title":"Quest Foglight for Databases directory traversal RCE in loadManageServerLicense","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.06+00:00","url":"https://junglewise.ai/threats/cve-2026-92194-quest-foglight-for-databases-loadmanageserverlicense-directory"},{"cve":"CVE-2026-92193","cvss":6.5,"slug":"cve-2026-92193-quest-foglight-for-databases-fileservlet-external-control-of-file","title":"Quest Foglight for Databases path traversal information disclosure","severity":"medium","exploited":false,"published_at":"2026-11-04T00:17:29.817+00:00","url":"https://junglewise.ai/threats/cve-2026-92193-quest-foglight-for-databases-fileservlet-external-control-of-file"},{"cve":"CVE-2026-92192","cvss":8.8,"slug":"cve-2026-92192-quest-foglight-for-databases-installlicense-directory-traversal","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:29.65+00:00","url":"https://junglewise.ai/threats/cve-2026-92192-quest-foglight-for-databases-installlicense-directory-traversal"},{"cve":"CVE-2026-92191","cvss":8.8,"slug":"cve-2026-92191-quest-foglight-for-databases-runscript-incorrect-authorization","title":"Quest Foglight for Databases runScript incorrect authorization remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:29.517+00:00","url":"https://junglewise.ai/threats/cve-2026-92191-quest-foglight-for-databases-runscript-incorrect-authorization"},{"cve":"CVE-2026-92190","cvss":9.8,"slug":"cve-2026-92190-quest-foglight-for-databases-basermiserviceexporter","title":"Quest Foglight for Databases deserialization of untrusted data RCE","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.39+00:00","url":"https://junglewise.ai/threats/cve-2026-92190-quest-foglight-for-databases-basermiserviceexporter"},{"cve":"CVE-2026-92189","cvss":9.8,"slug":"cve-2026-92189-quest-foglight-for-databases-writetopologysectiontofile-external","title":"Quest Foglight for Databases arbitrary file path code execution","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.26+00:00","url":"https://junglewise.ai/threats/cve-2026-92189-quest-foglight-for-databases-writetopologysectiontofile-external"},{"cve":"CVE-2026-92188","cvss":9.8,"slug":"cve-2026-92188-quest-foglight-for-databases-forgembeanserversupport-missing","title":"Quest Foglight for Databases authentication bypass in ForgeMBeanServerSupport","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.13+00:00","url":"https://junglewise.ai/threats/cve-2026-92188-quest-foglight-for-databases-forgembeanserversupport-missing"},{"cve":"CVE-2026-92187","cvss":8.8,"slug":"cve-2026-92187-quest-foglight-for-databases-extractandcreateuploadinfolist","title":"Quest Foglight for Databases directory traversal RCE in extractAndCreateUploadInfoList","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:28.993+00:00","url":"https://junglewise.ai/threats/cve-2026-92187-quest-foglight-for-databases-extractandcreateuploadinfolist"},{"cve":"CVE-2026-92186","cvss":8.8,"slug":"cve-2026-92186-quest-foglight-for-databases-pafnuploadfileandcreateinfo","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:28.867+00:00","url":"https://junglewise.ai/threats/cve-2026-92186-quest-foglight-for-databases-pafnuploadfileandcreateinfo"},{"cve":"CVE-2026-92185","cvss":7.2,"slug":"cve-2026-92185-quest-foglight-for-databases-abstractparser-xml-external-entity","title":"Quest Foglight for Databases XML External Entity disclosure in AbstractParser","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:28.723+00:00","url":"https://junglewise.ai/threats/cve-2026-92185-quest-foglight-for-databases-abstractparser-xml-external-entity"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":3,"exploited":0,"vulnerabilities":16},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Quest NetVault Backup","slug":"netvault-backup","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/netvault-backup"},{"name":"Quest KACE Systems Management Appliance","slug":"kace-systems-management-appliance","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/kace-systems-management-appliance"},{"name":"Quest KACE Systems Management Appliance (SMA)","slug":"kace-systems-management-appliance-sma","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/kace-systems-management-appliance-sma"}],"technology":{"hub":true,"name":"Quest Foglight for Databases","slug":"foglight-for-databases","vendor":{"hub":true,"name":"Quest","slug":"quest","url":"https://junglewise.ai/threats/vendors/quest"},"aliases":[],"category":"appliance","description":"Database performance and management monitoring appliance by Quest Software.","url":"https://junglewise.ai/threats/technologies/foglight-for-databases"},"most_severe":[{"cve":"CVE-2026-92190","cvss":9.8,"slug":"cve-2026-92190-quest-foglight-for-databases-basermiserviceexporter","title":"Quest Foglight for Databases deserialization of untrusted data RCE","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.39+00:00","url":"https://junglewise.ai/threats/cve-2026-92190-quest-foglight-for-databases-basermiserviceexporter"},{"cve":"CVE-2026-92189","cvss":9.8,"slug":"cve-2026-92189-quest-foglight-for-databases-writetopologysectiontofile-external","title":"Quest Foglight for Databases arbitrary file path code execution","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.26+00:00","url":"https://junglewise.ai/threats/cve-2026-92189-quest-foglight-for-databases-writetopologysectiontofile-external"},{"cve":"CVE-2026-92188","cvss":9.8,"slug":"cve-2026-92188-quest-foglight-for-databases-forgembeanserversupport-missing","title":"Quest Foglight for Databases authentication bypass in ForgeMBeanServerSupport","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:29.13+00:00","url":"https://junglewise.ai/threats/cve-2026-92188-quest-foglight-for-databases-forgembeanserversupport-missing"},{"cve":"CVE-2026-92197","cvss":8.8,"slug":"cve-2026-92197-quest-foglight-for-databases-unzipfile-directory-traversal-remote","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.677+00:00","url":"https://junglewise.ai/threats/cve-2026-92197-quest-foglight-for-databases-unzipfile-directory-traversal-remote"},{"cve":"CVE-2026-92195","cvss":8.8,"slug":"cve-2026-92195-quest-foglight-for-databases-loadevolvelicense-directory","title":"Quest Foglight for Databases directory traversal remote code execution in loadEvolveLicense","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.39+00:00","url":"https://junglewise.ai/threats/cve-2026-92195-quest-foglight-for-databases-loadevolvelicense-directory"},{"cve":"CVE-2026-92194","cvss":8.8,"slug":"cve-2026-92194-quest-foglight-for-databases-loadmanageserverlicense-directory","title":"Quest Foglight for Databases directory traversal RCE in loadManageServerLicense","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:30.06+00:00","url":"https://junglewise.ai/threats/cve-2026-92194-quest-foglight-for-databases-loadmanageserverlicense-directory"},{"cve":"CVE-2026-92192","cvss":8.8,"slug":"cve-2026-92192-quest-foglight-for-databases-installlicense-directory-traversal","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:29.65+00:00","url":"https://junglewise.ai/threats/cve-2026-92192-quest-foglight-for-databases-installlicense-directory-traversal"},{"cve":"CVE-2026-92191","cvss":8.8,"slug":"cve-2026-92191-quest-foglight-for-databases-runscript-incorrect-authorization","title":"Quest Foglight for Databases runScript incorrect authorization remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:29.517+00:00","url":"https://junglewise.ai/threats/cve-2026-92191-quest-foglight-for-databases-runscript-incorrect-authorization"},{"cve":"CVE-2026-92187","cvss":8.8,"slug":"cve-2026-92187-quest-foglight-for-databases-extractandcreateuploadinfolist","title":"Quest Foglight for Databases directory traversal RCE in extractAndCreateUploadInfoList","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:28.993+00:00","url":"https://junglewise.ai/threats/cve-2026-92187-quest-foglight-for-databases-extractandcreateuploadinfolist"},{"cve":"CVE-2026-92186","cvss":8.8,"slug":"cve-2026-92186-quest-foglight-for-databases-pafnuploadfileandcreateinfo","title":"Quest Foglight for Databases directory traversal remote code execution","severity":"high","exploited":false,"published_at":"2026-11-04T00:17:28.867+00:00","url":"https://junglewise.ai/threats/cve-2026-92186-quest-foglight-for-databases-pafnuploadfileandcreateinfo"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}