Live › vulnerability › CVE-2026-92199
Quest Foglight for Databases ships a hardcoded cryptographic key in its EncryptionUtil symmetricDecrypt method. A local user who already runs low-privileged code can use it to escalate to SYSTEM and run arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 00:46 UTC. All times on this page are UTC.
Windows hosts running Quest Foglight for Databases before 8.3 where an attacker or malicious process can already run low-privileged code locally. The flaw is a hardcoded key in the symmetricDecrypt method of EncryptionUtil, which lets that user escalate to SYSTEM. Hosts without Foglight for Databases, or already on 8.3 or later, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Foglight for Databases | vendor | < 8.3 | 8.3 |
Fixed in Foglight 8.3)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the symmetricDecrypt method. The issue results from the use of a hard-coded cryptographic key. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-29967.
This page as .md · .json · in your agent: get_signal("CVE-2026-92199")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.