CVE-2026-92198highCWE-611

CVE-2026-92198: high-severity vulnerability in Quest Foglight for Databases

Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability

Published · Updated

Follow this CVE+ Monitor Foglight for Databases

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 2.8%
Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getSource method. Due to the improper restriction of XML External Entity (XXE) references, a crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of the application. Was ZDI-CAN-29934.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Affected products
Quest · Foglight for Databases
Related CVEs — Quest Foglight for Databases

In the same product, most dangerous first.

CVE-2026-92193MEDIUMQuest Foglight for Databases FileServlet External Control of File Path Information Disclosure VulnerabilityEPSS 2.1%CVE-2026-92185HIGHQuest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure VulnerabilityEPSS 1.9%CVE-2026-92197HIGHQuest Foglight for Databases unzipFile Directory Traversal Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-92186HIGHQuest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-92194HIGHQuest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-92195HIGHQuest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution VulnerabilityEPSS 1.3%