CVE-2026-92196

Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases (affected versions not specified)

Description An issue exists where remote authenticated attackers can execute arbitrary code in the context of SYSTEM. The flaw is located in the renderTemplateString() function, which fails to properly validate user-supplied strings before they are processed by the template engine, leading to Server-Side Template Injection (SSTI). SSTI is a vulnerability where an attacker injects malicious templates that are then executed by the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.