Quest Foglight RCE: External Control of File Path in writeTopologySectionToFile
CVE-2026-92189 Published on November 3, 2026

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the writeTopologySectionToFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29169.

NVD

Weakness Type

External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.


Affected Versions

Quest Foglight for Databases Version 8.2.0 is affected by CVE-2026-92189