CVE-2026-47689

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the "buildRow" method in "fogpage.class.php" substitutes data values into HTML table cell templates using "strreplace" without any HTML escaping. An unauthenticat...

CVE-2026-47685

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenticated inventory service endpoint "/service/inventory.php" persists client-supplied values without sanitization, and the Host Management Inventory pa...