CVE-2026-54554

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

CVE-2026-54554 FOG adInfo endpoint is reported to disclose the Active Directory join password

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

CVE-2026-54554 FOG adInfo endpoint is reported to disclose the Active Directory join password

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

EUVD-2026-101520

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

CVE-2026-54554

The FOG open-source cloning and imaging suite is vulnerable in versions prior to 1.5.10.1870 . The adInfo() endpoint in packages/web/lib/fog/fogpage.class.php can be accessed without an authenticated session via node=ipxe. This flaw allows a remote unauthenticated requester to obtain the FOG_AD_D...

CVE-2026-54554 FOG adInfo endpoint is reported to disclose the Active Directory join password

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

CVE-2026-54554

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

CVE-2026-54554: Exposure of Sensitive Information to an Unauthorized Actor

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...

PT-2026-114202

Name of the Vulnerable Software and Affected Versions FOG versions prior to 1.5.10.1870 Description The adInfo endpoint in packages/web/lib/fog/fogpage.class.php can be accessed by a remote unauthenticated requester via node=ipxe without a session. This allows the disclosure of the default...

Malicious code in adinfo (PyPI)

Source: checkmarx 654a83150d24aa8363e6ecad811edd2dd3b2b6fe2e458a7b06be9a80ed491a0f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

MAL-2023-2487 Malicious code in adinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 654a83150d24aa8363e6ecad811edd2dd3b2b6fe2e458a7b06be9a80ed491a0f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in adinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 654a83150d24aa8363e6ecad811edd2dd3b2b6fe2e458a7b06be9a80ed491a0f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...