CVE-2026-92198

Name of the Vulnerable Software and Affected Versions Quest Foglight for Databases (affected versions not specified)

Description Remote attackers can initiate arbitrary server-side requests without authentication. The issue resides in the getSource() function, where improper restriction of XML External Entity (XXE) references allows a crafted document with a specific URI to force the XML parser to access that URI and embed its contents into the XML document. This can lead to information disclosure within the application context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.