CVE Watch4 de nov. de 2026

CVE-2026-92191

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attacke

CVSS

8.8

Alta

EPSS

0.5%

p44

KEV

—

Exploit Today

0-100

Publicado: 4 de nov. de 2026 · Última mod.: 4 de nov. de 2026 · CWE-863

EPSS · 30d

0.5%EPSS · 30 dias0.5%

2026-11-042026-11-05

Descrição técnica

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the runScript function. The issue results from incorrect authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29192.

Referências oficiais

www.zerodayinitiative.comhttps://www.zerodayinitiative.com/advisories/ZDI-26-859/

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1233343.8 BAI

—

———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project9h CVE-2026-1233333.8 BAI

—

———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints9h CVE-2026-1233286.4 MÉD

—

———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab9h CVE-2026-1233267.1 ALT

—

———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension9h CVE-2026-1233247.7 ALT

—

———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible9h CVE-2026-1232993.1 BAI

—

———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible9h