Quest Foglight for Databases Vulnerable to Information Disclosure via File Path Manipulation
A vulnerability in Quest Foglight for Databases allows authenticated attackers to disclose sensitive system information through improper file path validation.
The Zero Day Initiative (ZDI) has disclosed a significant information disclosure vulnerability affecting Quest Foglight for Databases. Identified as ZDI-26-853 and assigned CVE-2026-92193, the flaw resides within the product's FileServlet component.
This vulnerability stems from a critical lack of proper validation on user-supplied file paths. Attackers who possess valid authentication credentials for a vulnerable Foglight instance can exploit this weakness. By manipulating path inputs, they can trick the FileServlet into accessing and revealing sensitive files on the underlying system.
The potential impact of this vulnerability is severe, as successful exploitation allows an attacker to read files in the context of the SYSTEM user. This could expose highly sensitive configuration details, credentials, or other critical data necessary for further system compromise or lateral movement within a network.
Quest has addressed this vulnerability by releasing a patch in Foglight version 8.3. Users are strongly advised to update to this version or a later release to mitigate the risk of information disclosure.
The disclosure timeline indicates that the vulnerability was initially reported to Quest on April 30, 2026. Following coordinated efforts between ZDI and Quest, a public advisory was released on November 3, 2026, with an update to the advisory on the same day.
This advisory serves as a reminder of the importance of robust input validation in web applications, especially those handling file operations. Even authenticated vulnerabilities can pose substantial risks if they allow for the disclosure of privileged information.
Organizations utilizing Quest Foglight for Databases should prioritize applying the available security update. Monitoring network traffic for unusual file access patterns or unexpected data exfiltration attempts can also aid in detecting potential exploitation.