Critical Remote Code Execution (CVE‑2026‑92189) in Quest Foglight for Databases
What It Is — Quest Foglight for Databases contains an unauthenticated remote code execution flaw (CVE‑2026‑92189). The vulnerability resides in the writeTopologySectionToFile method, which writes a user‑supplied file path without validation. An attacker can supply an arbitrary path, causing the application to write malicious code that the system then executes with SYSTEM privileges. The CVSS v3.1 base score is 9.8 (Critical), with network‑only access, no authentication, and full confidentiality, integrity, and availability impact. The issue was reported on 30 April 2026, publicly disclosed on 3 November 2026, and is fixed in Foglight 8.3.
Affected Products — Quest Foglight for Databases (all versions prior to 8.3).
Why It Matters for Trust & Control Assurance — The flaw tests the control objective of secure software configuration and validation of privileged operations; a single control that satisfies multiple frameworks (e.g., NIST CSF 2.0 “Protect” and ISO 27001 “Secure Development”).
Recommended Actions — Deploy Foglight 8.3 or later immediately; verify that file‑path inputs are validated; update your asset inventory to flag unpatched Foglight instances; run an authenticated scan for CVE‑2026‑92189; capture remediation evidence for audit readiness. Source: Zero Day Initiative advisory