{"id":"CVE-2026-92188","published":"2026-11-04T00:17:29.130","lastModified":"2026-11-04T00:17:29.130","description":"Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the ForgeMBeanServerSupport module. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29168.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-854/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The ForgeMBeanServerSupport module in Quest Foglight for Databases lacks authentication, allowing unauthenticated remote attackers to access and abuse its functionality to execute arbitrary code with SYSTEM privileges.","exploitability":"Exploitation is trivial for remote attackers since no authentication or user interaction is required.","blast_radius":"Successful exploitation grants full system compromise on the affected host, enabling data theft, lateral movement, and service disruption across the monitored infrastructure.","remediation":"Upgrade to Quest Foglight for Databases version 2.590 or later, which includes a fix for this vulnerability per the vendor advisory.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","java-mbean","system-privilege"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:49:18.395Z"}}