CVE-2026-92188

Summary

The ForgeMBeanServerSupport module in Quest Foglight for Databases lacks authentication, allowing unauthenticated remote attackers to access and abuse its functionality to execute arbitrary code with SYSTEM privileges.

Exploitability

Exploitation is trivial for remote attackers since no authentication or user interaction is required.

Blast radius

Successful exploitation grants full system compromise on the affected host, enabling data theft, lateral movement, and service disruption across the monitored infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Quest Foglight for Databases version 2.590 or later, which includes a fix for this vulnerability per the vendor advisory.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.