Quest
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Foglight for Databases | 16 | – | Nov 3, 2026 |
| NetVault Backup | 10 | – | Jun 24, 2026 |
| Coexistence Manager for Notes | 1 | – | Dec 19, 2025 |
| Foglight Evolve | 1 | – | Mar 23, 2020 |
| KACE Systems Management Appliance | 1 | – | Jul 4, 2025 |
Exploited and recent CVEs
- CVE-2026-92196 Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability 0.6%
- CVE-2026-92200 Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability 0.1%
- CVE-2026-92198 Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability 2.8%
- CVE-2026-92199 Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability <0.1%
- CVE-2026-92185 Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability 1.9%
- CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability 0.6%
- CVE-2026-92197 Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92191 Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability 0.5%
- CVE-2026-92186 Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92194 Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92195 Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92192 Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92188 Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability 0.6%
- CVE-2026-92193 Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability 2.1%
- CVE-2026-92187 Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability 1.3%
- CVE-2026-92190 Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.6%
- CVE-2026-7569 Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability 0.9%
- CVE-2026-9787 Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability 5.5%
- CVE-2026-9786 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9785 Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9784 Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9783 Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9782 Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9781 Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2026-9780 Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability 0.9%
- CVE-2026-7570 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability 0.9%
- CVE-2025-12874 HTTP Request Smuggling in Quest Coexistence Manager for Notes 0.5%
- CVE-2025-26850 The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems. 0.2%
- CVE-2020-8868 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specifi 9.5%