FO
Product
fogproject
21
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 12Medium 7Low 0
Watch
Add fogproject to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116778 New | 8.8 | Oct 28 | FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution Affected: < 1.5.10.2253 |
| CVE-2024-40645 | 8.8 | Jul 31 | FOG is a cloning/imaging/rescue suite/inventory management system Affected: 1.5.10 through 1.5.10.41 |
| CVE-2021-32243 | 8.8 | Jun 16 | FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated) Affected: 1.5.9 |
| CVE-2026-47687 | 8.7 | Jul 21 | FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpoint Affected: < 1.5.10.1832; < 1.6.0-beta.2313 |
| CVE-2026-47685 | 8.7 | Jul 21 | FOGProject has stored XSS via unauthenticated inventory service renders unescaped in Host Management page Affected: < 1.5.10.1832; < 1.6.0-beta.2313 |
| CVE-2024-42348 | 8.6 | Aug 2 | FOG is a cloning/imaging/rescue suite/inventory management system Affected: 1.5.10.41 before 1.5.10.41.3 |
| CVE-2026-47688 | 8.2 | Jul 21 | FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power schedules Affected: < 1.5.10.1832; < 1.6.0-beta.2313 |
| CVE-2024-41954 | 7.8 | Jul 31 | FOG is a cloning/imaging/rescue suite/inventory management system Affected: 1.5.10 through 1.5.10.41 |
| CVE-2024-34477 | 7.8 | May 27 | configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure) Affected: before 1.5.10.41 |
| CVE-2026-54554 | 7.5 | Oct 14 | FOG adInfo endpoint is reported to disclose the Active Directory join password Affected: < 1.5.10.1870 |
| CVE-2026-24138 | 7.5 | Jan 23 | FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php` Affected: <= 1.5.10.1754 |
| CVE-2023-46236 | 7.5 | Oct 31 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system Affected: before 1.5.10 |
Showing 12