Live › vulnerability › CVE-2026-92191
Foglight for Databases has an incorrect authorization check in its runScript function. A logged-in remote user with low privileges can run code as SYSTEM. ZDI reports it fixed in Foglight 8.3.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 00:46 UTC. All times on this page are UTC.
Teams running Quest Foglight for Databases 8.2.0 (the version listed in the CVE record) on Windows. The attacker needs a valid login, so exposure depends on who has accounts on the Foglight server. Anyone not running Foglight for Databases can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Foglight for Databases | vendor | 8.2.0 (CVE record); earlier versions unconfirmed | 8.3 |
8.2.0 is listed as affected and 8.3 as the fixUpgrade Foglight for Databases to 8.3 (per ZDI-26-859; Quest advisory not found)
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability.
The specific flaw exists within the runScript function. The issue results from incorrect authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29192.
This page as .md · .json · in your agent: get_signal("CVE-2026-92191")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.