Live › vulnerability › CVE-2026-92200
ZDI-26-865: the Foglight for Databases installer leaves incorrect permissions on a folder it uses. A local low-privileged user can abuse this to run code as SYSTEM. ZDI says it is fixed in Foglight 8.3. No exploitation or public PoC known.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 00:46 UTC. All times on this page are UTC.
Only machines where Quest Foglight for Databases is installed are exposed. An attacker needs a low-privileged foothold on that machine first, so systems with no local user access risk less. Remote attackers without a local account cannot use this flaw directly.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Foglight for Databases | vendor | < 8.3 (exact lower bound not stated) | 8.3 |
Upgrade to Foglight 8.3 (per ZDI-26-865; Quest's own advisory not found)
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from incorrect permissions on a folder used by the product. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-31118.
This page as .md · .json · in your agent: get_signal("CVE-2026-92200")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.