---
id: CVE-2026-92188
title: >-
  Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication
  Remote Code Execution Vulnerability
summary: >-
  Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication
  Remote Code Execution Vulnerability. This vulnerability allows remote
  attackers to execute arbitrary code on affected installations of Quest
  Foglight for Databas…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-306
vendor: Quest
product: Foglight for Databases
affected:
  - foglight_for_databases 8.2.0
published: '2026-11-03'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T23:50:58.353Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-92188'
references:
  - url: 'https://www.zerodayinitiative.com/advisories/ZDI-26-854/'
    label: ZDI-26-854
tags:
  - cve.org
epss: 0.00599
epssPercentile: 0.48799
zeroDay: true
ingestedAt: '2026-11-05T20:33:06.628Z'
---

## Overview

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the ForgeMBeanServerSupport module. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29168.

## Affected

- `foglight_for_databases 8.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.