FO
Vendor
FOGProject
22
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116778 New | FO fogproject FOGProject | 8.8 | Oct 28 | FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution |
| CVE-2026-54554 | FO fogproject FOGProject | 7.5 | Oct 14 | FOG adInfo endpoint is reported to disclose the Active Directory join password |
| CVE-2026-47689 | FO fogproject FOGProject | 5.2 | Jul 21 | FOGProject has stored XSS via unescaped inventory data in buildRow() rendered on Group Inventory tab |
| CVE-2026-47688 | FO fogproject FOGProject | 8.2 | Jul 21 | FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power schedules |
| CVE-2026-47687 | FO fogproject FOGProject | 8.7 | Jul 21 | FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpoint |
| CVE-2026-47685 | FO fogproject FOGProject | 8.7 | Jul 21 | FOGProject has stored XSS via unauthenticated inventory service renders unescaped in Host Management page |
| CVE-2026-33739 | FO fogproject FOGProject | 4.8 | Mar 27 | FOG has Stored XSS in Multiple Management Pages |
| CVE-2026-24138 | FO fogproject FOGProject | 7.5 | Jan 23 | FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php` |
| CVE-2025-58443 | FO fogproject FOGProject | 9.1 | Sep 6 | FOG's authentication bypass leads to full SQL DB dump |
| CVE-2024-42349 | FO Fogproject Fogproject | 5.3 | Aug 2 | FOG is a cloning/imaging/rescue suite/inventory management system |
| CVE-2024-42348 | FO Fogproject Fogproject | 8.6 | Aug 2 | FOG is a cloning/imaging/rescue suite/inventory management system |
| CVE-2024-41954 | FO Fogproject Fogproject | 7.8 | Jul 31 | FOG is a cloning/imaging/rescue suite/inventory management system |
| CVE-2024-41108 | FO Fogproject Fogproject | 5.9 | Jul 31 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system |
| CVE-2024-40645 | FO Fogproject Fogproject | 8.8 | Jul 31 | FOG is a cloning/imaging/rescue suite/inventory management system |
| CVE-2024-39916 | FO Fogproject Fogproject | 6.4 | Jul 12 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system |
| CVE-2024-39914 | FO Fogproject Fogproject | 9.8 | Jul 12 | FOG is a cloning/imaging/rescue suite/inventory management system |
| CVE-2024-34477 | FO Fogproject Fogproject | 7.8 | May 27 | configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure) |
| CVE-2023-46237 | FO Fogproject Fogproject | 5.3 | Oct 31 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system |
| CVE-2023-46236 | FO Fogproject Fogproject | 7.5 | Oct 31 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system |
| CVE-2023-46235 | FO Fogproject Fogproject | 6.1 | Oct 31 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system |
| CVE-2021-32243 | FO Fogproject Fogproject | 8.8 | Jun 16 | FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated) |
| CVE-2014-3111 | FO Fog Fogproject | – | Oct 21 | Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Printer Model… |