ZDI 2026-11-03

ZDI-26-862: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability

CVE-2026-92185

Machine-generated analysis · WAYSCloud LLM

Remote unauthenticated attackers can exploit XML external entity processing in Quest Foglight for Databases to disclose sensitive information.

Context

The advisory concerns Quest Foglight for Databases. It describes an XML external entity (XXE) processing flaw that leads to information disclosure. Authentication is not required to trigger the issue.

Operator considerations

Check: Verify whether the AbstractParser component is present and whether XML parsing allows external entity resolution.
Isolate: Restrict network access to the Foglight service to limit remote exploitation.
Log: Enable logging of XML parsing activity to capture attempted XXE exploitation attempts.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-92185.

Read the full advisory on ZDI →