HIGHCVSS v3 7.8Vulnerability

CVE-2026-92199

Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the symmetricDecrypt method. The issue results from the use of a hard-coded cryptographic key. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-29967.

Properties

Severity
HIGH
Nvd fetched at
2026-11-04T01:29:06.847378+00:00
Cvss severity
HIGH
Cvss score
7.8
Retrieved at
2026-11-04T01:30:00+00:00
Score
7.8
Cvss version
3.0
Last source
NVD
Cve id
CVE-2026-92199
Cvss vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-11-04T01:30:00+00:00
Name
CVE-2026-92199
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published at
2026-11-04T00:17:30.970
Last modified
2026-11-04T00:17:30.970

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-92199 (CVSS v3 7.8) — Ninja Signal Threat Intelligence | Ninja Signal