Vulnerabilities

Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability.

Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileServlet class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-29216.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Quest

Product

Foglight for Databases

CVSS v3.0

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-73

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-92193 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 24
   ZDI advisory ZDI 21h ago

   Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability

   CVSS 6.5 CVE-2026-92193