PT-2026-136728

CVE-2026-92193

·

Published

2026-11-03

·

Updated

2026-11-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases (affected versions not specified)
Description An issue exists in the FileServlet class where user-supplied paths are not properly validated before being used in file operations. This allows authenticated remote attackers to disclose sensitive information in the context of SYSTEM.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-73: External Control of File Name or Path
Related identifiers
CVE-2026-92193
ZDI-26-853
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com