SB2026110483 - Multiple vulnerabilities in Quest Foglight for Databases

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026110483

SB2026110483 - Multiple vulnerabilities in Quest Foglight for Databases

Published: November 4, 2026

Security Bulletin ID SB2026110483
CSH Severity
High
Patch available
YES
Number of vulnerabilities 13
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 15% Medium 62% Low 23%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 13 vulnerabilities.


1) Path traversal (CVE-ID: CVE-2026-92187)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the extractAndCreateUploadInfoList method. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system, leading to arbitrary code execution.


2) Incorrect Privilege Assignment (CVE-ID: CVE-2026-92200)

CWE-ID: CWE-266 - Incorrect Privilege Assignment

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect permissions on a folder used by the product within the product installer, which leads to security restrictions bypass and privilege escalation.


3) Improper Neutralization of Special Elements Used in a Template Engine (CVE-ID: CVE-2026-92196)

CWE-ID: CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to the server-side template injection issue within the renderTemplateString method. A remote administrator can execute arbitrary code on the target system.


4) XML External Entity injection (CVE-ID: CVE-2026-92198)

CWE-ID: CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied XML input within the getSource method. A remote attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.

Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.


5) Use of hard-coded cryptographic key (CVE-ID: CVE-2026-92199)

CWE-ID: CWE-321 - Use of Hard-coded Cryptographic Key

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to use of a hard-coded cryptographic key within the symmetricDecrypt method, which leads to security restrictions bypass and arbitrary code execution with elevated privileges.


6) Path traversal (CVE-ID: CVE-2026-92197)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the unzipFile method. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system, leading to arbitrary code execution.


7) Path traversal (CVE-ID: CVE-2026-92194)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the loadManageServerLicense script. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system, leading to arbitrary code execution.


8) Path traversal (CVE-ID: CVE-2026-92195)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the loadEvolveLicense script. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system, leading to arbitrary code execution.


9) Path traversal (CVE-ID: CVE-2026-92193)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the FileServlet class. A remote user can send a specially crafted HTTP request and read arbitrary files on the system.


10) Deserialization of Untrusted Data (CVE-ID: CVE-2026-92190)

CWE-ID: CWE-502 - Deserialization of Untrusted Data

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insecure input validation when processing serialized data within the configuration of the baseRmiServiceExporter bean. A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


11) XML External Entity injection (CVE-ID: CVE-2026-92185)

CWE-ID: CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied XML input within the AbstractParser class. A remote attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.

Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.


12) External Control of File Name or Path (CVE-ID: CVE-2026-92189)

CWE-ID: CWE-73 - External Control of File Name or Path

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to upload arbitrary files.

The vulnerability exists due to the lack of proper validation of a user-supplied path within the writeTopologySectionToFile method. A remote attacker can upload arbitrary files on the system and execute arbitrary code on the target system..


13) Path traversal (CVE-ID: CVE-2026-92186)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within the paFnUploadFileAndCreateInfo script. A remote user can send a specially crafted HTTP request and upload arbitrary files on the system, leading to arbitrary code execution.


Remediation

Install update from vendor's website.

References