Quest has 17 CVEs on record between 2018 and 2026. Disclosure cadence is accelerating: 16 in the last 90 days against 0 in the 90 before. The busiest recent month was November 2026 with 16. The median CVSS is 8.8 (high), with 4 rated critical. 6% have been exploited in the wild, in line with the corpus average. The most common weakness class is CWE-22 (6). Most affected products: Foglight for Databases (16), kace_system_management_appliance (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 6% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —(1)
- Last 90 days
- 16 prev 0
Weakness classes
Products
- Foglight for Databases 16
- kace_system_management_appliance 1
Worst active — by depth score
CVE-2018-11138Critical· 9.8The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.100CVE-2026-92190Critical· 9.8Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability79CVE-2026-92189Critical· 9.8Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability79CVE-2026-92188Critical· 9.8Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability79CVE-2026-92197High· 8.8Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability74
Quest vulnerabilities
CVEs affecting Quest, newest first. Open any entry for full detail, references, and exploit status.
17 CVEsRSS
CVE-2026-92196High· 7.20dayQuest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability
Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Da…
CVE-2026-92200High· 7.80dayQuest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacke…
CVE-2026-92199High· 7.80dayQuest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An …
CVE-2026-92198High· 8.20dayQuest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability
Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Quest Foglight…
CVE-2026-92185High· 7.20dayQuest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for…
CVE-2026-92191High· 8.80dayQuest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability
Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentic…
CVE-2026-92189Critical· 9.80dayQuest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight f…
CVE-2026-92197High· 8.80dayQuest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authenticatio…
CVE-2026-92186High· 8.80dayQuest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databa…
CVE-2026-92195High· 8.80dayQuest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authe…
CVE-2026-92194High· 8.80dayQuest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases.…
CVE-2026-92192High· 8.80dayQuest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authenti…
CVE-2026-92193Medium· 6.50dayQuest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Dat…
CVE-2026-92188Critical· 9.80dayQuest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databas…
CVE-2026-92190Critical· 9.80dayQuest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight f…
CVE-2026-92187High· 8.80dayQuest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Dat…
CVE-2018-11138Critical· 9.8CISA KEVPoCThe '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.