High-Severity XXE Vulnerability in Quest Foglight for Databases

## Overview CVE-2026-92198 affects Quest Foglight for Databases. This vulnerability enables remote attackers to execute arbitrary server-side requests without authentication. The flaw lies in the getSource method, which improperly handles XML External Entity (XXE) references. ## Technical Details The vulnerability occurs when the XML parser processes crafted documents that specify a URI. Due to insufficient restrictions on XXE references, the parser accesses the specified URI and incorporates its contents back into the XML document. This behavior can lead to unauthorized information disclosure. ## Impact An attacker exploiting this vulnerability can gain access to sensitive information within the application context. The CVSS score of 8.2 indicates a high severity level, underscoring the potential risks associated with this flaw. Organizations using affected versions of Quest Foglight for Databases should assess their exposure to this vulnerability. ## Mitigation Defenders should prioritize patching affected installations of Quest Foglight for Databases. Ensure that the latest security updates are applied to mitigate this vulnerability. Additionally, review and restrict XML parsing configurations to prevent XXE attacks. Regular security audits can help identify and remediate similar vulnerabilities in the future.