Quest Foglight for Databases flaws allow remote command execution
A database monitoring program could be taken over by attackers!
Summary
Several flaws in Quest Foglight for Databases let an attacker run commands as SYSTEM or read information, with or without logging in. The sources list version 8.2.0 as affected.
What to do
The sources name no fixed version. Check Quest's advisory and update to the fixed version.
Products and platforms
CVE IDs
- CVE-2026-92190 (opens in a new tab)
- CVE-2026-92187 (opens in a new tab)
- CVE-2026-92193 (opens in a new tab)
- CVE-2026-92188 (opens in a new tab)
- CVE-2026-92192 (opens in a new tab)
- CVE-2026-92195 (opens in a new tab)
- CVE-2026-92194 (opens in a new tab)
- CVE-2026-92186 (opens in a new tab)
- CVE-2026-92191 (opens in a new tab)
- CVE-2026-92197 (opens in a new tab)
- CVE-2026-92189 (opens in a new tab)
- CVE-2026-92185 (opens in a new tab)
- CVE-2026-92199 (opens in a new tab)
- CVE-2026-92198 (opens in a new tab)
- CVE-2026-92200 (opens in a new tab)
- CVE-2026-92196 (opens in a new tab)
Sources
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen