Quest

Products

ProductCVEsExploitedLatest
Foglight for Databases16–Nov 3, 2026
NetVault Backup10–Jun 24, 2026
Coexistence Manager for Notes1–Dec 19, 2025
Foglight Evolve1–Mar 23, 2020
KACE Systems Management Appliance1–Jul 4, 2025

Exploited and recent CVEs

  • CVE-2026-92196 High 7.2 Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability 0.6%
  • CVE-2026-92200 High 7.8 Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability 0.1%
  • CVE-2026-92198 High 8.2 Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability 2.8%
  • CVE-2026-92199 High 7.8 Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability <0.1%
  • CVE-2026-92185 High 7.2 Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability 1.9%
  • CVE-2026-92189 Critical 9.8 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability 0.6%
  • CVE-2026-92197 High 8.8 Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92191 High 8.8 Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability 0.5%
  • CVE-2026-92186 High 8.8 Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92194 High 8.8 Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92195 High 8.8 Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92192 High 8.8 Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92188 Critical 9.8 Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability 0.6%
  • CVE-2026-92193 Medium 6.5 Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability 2.1%
  • CVE-2026-92187 High 8.8 Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability 1.3%
  • CVE-2026-92190 Critical 9.8 Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.6%
  • CVE-2026-7569 High 8.8 Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability 0.9%
  • CVE-2026-9787 High 8.8 Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability 5.5%
  • CVE-2026-9786 High 8.8 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9785 High 8.8 Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9784 High 8.8 Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9783 High 8.8 Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9782 High 8.8 Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9781 High 8.8 Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2026-9780 High 8.8 Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability 0.9%
  • CVE-2026-7570 High 8.8 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability 0.9%
  • CVE-2025-12874 Medium 6.3 HTTP Request Smuggling in Quest Coexistence Manager for Notes 0.5%
  • CVE-2025-26850 Critical 9.3 The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems. 0.2%
  • CVE-2020-8868 Critical 9.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specifi 9.5%