CVE-2026-54554

The FOG open-source cloning and imaging suite is vulnerable in versions prior to 1.5.10.1870 . The adInfo() endpoint in packages/web/lib/fog/fogpage.class.php can be accessed without an authenticated session via node=ipxe. This flaw allows a remote unauthenticated requester to obtain the FOG_AD_D...