VulnSocial

CVE-2026-92196

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the renderTemplateString method. The issue results from the lack of proper validation of a user-supplied string before processing it with the template engine. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29889.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1336

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-04: 111-04
Referenced assets1 URL
Full discourse1 post
  • Security Arsenal, LLC@SecurityAr58409

    🔒 #CyberSecurity CVE-2026-92196: Quest Foglight for Databases SSTI Remote Code Execution — Detec… "The Zero Day Initiative has published ZDI-26-866, disclosing a server-side template injection…" 🔗 https://securityarsenal.com/blog/cve-2026-92196-quest-foglight-for-databases-ssti-remote-code-execution-detection-and-remediation-guide #CyberSecurity #ThreatIntel #critical #zeroday #cve

    0000063
    41 followersView on X

Explore more

Back to dashboard