CVE-2026-47688

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the "clearAES" and "clearPMTasks" methods in "FOGPage" can be invoked by an unauthenticated attacker via a single HTTP GET request through the public "client" nod...

PT-2026-62111

Name of the Vulnerable Software and Affected Versions FOG versions prior to 1.5.10.1832 FOG versions prior to 1.6.0-beta.2313 Description The buildRow function in fogpage.class.php fails to perform HTML escaping when substituting data values into HTML table cell templates via str replace. An...

CVE-2026-47688: Missing Authorization

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the clearAES and clearPMTasks methods in FOGPage can be invoked by an unauthenticated attacker via a single HTTP GET request through the public client node...