CVE-2026-92190

Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases (affected versions not specified)

Description Remote attackers can execute arbitrary code on affected installations without authentication. The issue stems from the baseRmiServiceExporter bean, which fails to properly validate user-supplied data before deserialization. This allows an attacker to execute code with SYSTEM privileges. Deserialization is the process of converting a data stream back into an object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.