CVE-2026-116778High· 8.8▾ TwilightFOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.5%
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/{id}/edit to modify Storage Node user, pass, and ftppath fields because the API validates the credentials but does not enforce an administrator-only role. With storage replication enabled and a usable Storage Node, FOGImageReplicator interpolates those fields into an lftp command executed through proc_open() by the root-running service, allowing the low-privileged user to execute commands as root. This issue is fixed in versions 1.5.10.2253 and 1.6.0-RC-1.
fogproject < 1.5.10.2253Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-47688High· 8.2FOG is a free open-source cloning/imaging/rescue suite/inventory management system
CVE-2026-54554High· 7.5FOG is a free open-source cloning/imaging/rescue suite/inventory management system
CVE-2025-58443Critical· 9.1FOG is a free open-source cloning/imaging/rescue suite/inventory management system
CVE-2026-47689Medium· 4.6FOG is a free open-source cloning/imaging/rescue suite/inventory management system
CVE-2026-47687High· 7.3FOG is a free open-source cloning/imaging/rescue suite/inventory management system
CVE-2026-47685High· 7.3FOG is a free open-source cloning/imaging/rescue suite/inventory management system