[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Zero Day Initiative ZDI-26-851 to ZDI-26-866, Nov 3; fixed in Foglight 8.3)

Quest Foglight for Databases: 16 ZDI advisories including three unauthenticated SYSTEM-level RCEs (CVSS 9.8); upgrade to Foglight 8.3

  • Fix: upgrade Foglight for Databases to 8.3 (per ZDI's advisories). Several reports date back to April and May 2026, so vendor fixes have been out for some time.
  • Unauthenticated, 9.8: CVE-2026-92190 (ZDI-26-851), CVE-2026-92188 (ZDI-26-854), CVE-2026-92189 (ZDI-26-861).
  • Until patched: keep Foglight's management, web and RMI/JMX ports reachable only from admin networks. It's a monitoring server that holds database credentials, so treat an exposed, unpatched instance as a credential risk.
  • Other CVEs: 92185, 92186, 92187, 92191, 92192, 92193, 92194, 92195, 92196, 92197, 92198, 92199, 92200.

Sources: ZDI-26-851: Foglight baseRmiServiceExporter deserialization RCE (CVE-2026-92190) · ZDI-26-854: Foglight ForgeMBeanServerSupport missing authentication RCE (CVE-2026-92188) · ZDI-26-861: Foglight writeTopologySectionToFile RCE (CVE-2026-92189) · ZDI published advisories list