CVE-2026-92185

Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases (affected versions not specified)

Description Remote attackers can disclose sensitive information on affected installations without requiring authentication. The issue resides in the AbstractParser class, where improper restriction of XML External Entity (XXE) references allows a crafted document specifying a URI to force the XML parser to access that URI and embed its contents back into the XML document. This allows information disclosure in the context of SYSTEM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.