agentprime: fogprojectEvery new CVE for fogproject.https://agentprime.io/CVE-2026-116778: FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command executionhttps://agentprime.io/advisories/CVE-2026-116778/https://agentprime.io/advisories/CVE-2026-116778/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:49:59 GMTCVECVE-2026-54554: FOG adInfo endpoint is reported to disclose the Active Directory join passwordhttps://agentprime.io/advisories/CVE-2026-54554/https://agentprime.io/advisories/CVE-2026-54554/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:08:03 GMTCVECVE-2026-47689: FOGProject has stored XSS via unescaped inventory data in buildRow() rendered on Group Inventory tabhttps://agentprime.io/advisories/CVE-2026-47689/https://agentprime.io/advisories/CVE-2026-47689/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 20:42:19 GMTCVECVE-2026-47688: FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power scheduleshttps://agentprime.io/advisories/CVE-2026-47688/https://agentprime.io/advisories/CVE-2026-47688/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 20:40:31 GMTCVECVE-2026-47687: FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpointhttps://agentprime.io/advisories/CVE-2026-47687/https://agentprime.io/advisories/CVE-2026-47687/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 20:39:01 GMTCVECVE-2026-47685: FOGProject has stored XSS via unauthenticated inventory service renders unescaped in Host Management pagehttps://agentprime.io/advisories/CVE-2026-47685/https://agentprime.io/advisories/CVE-2026-47685/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 20:37:32 GMTCVECVE-2026-33739: FOG has Stored XSS in Multiple Management Pageshttps://agentprime.io/advisories/CVE-2026-33739/https://agentprime.io/advisories/CVE-2026-33739/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 19:45:12 GMTCVECVE-2026-24138: FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php`https://agentprime.io/advisories/CVE-2026-24138/https://agentprime.io/advisories/CVE-2026-24138/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 00:19:33 GMTCVECVE-2025-58443: FOG's authentication bypass leads to full SQL DB dumphttps://agentprime.io/advisories/CVE-2025-58443/https://agentprime.io/advisories/CVE-2025-58443/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. CVSS score 9.9 (7.0 or more) and EPSS 0.21 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Sep 2025 20:04:25 GMTCVEcriticalCVE-2024-42349: FOG has a Log Information Disclosurehttps://agentprime.io/advisories/CVE-2024-42349/https://agentprime.io/advisories/CVE-2024-42349/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Aug 2024 20:01:29 GMTCVECVE-2024-42348: FOG leaks sensitive information (AD domain, username and password)https://agentprime.io/advisories/CVE-2024-42348/https://agentprime.io/advisories/CVE-2024-42348/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Aug 2024 19:58:12 GMTCVEcriticalCVE-2024-41954: FOG Weak file permissionshttps://agentprime.io/advisories/CVE-2024-41954/https://agentprime.io/advisories/CVE-2024-41954/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jul 2024 19:23:41 GMTCVECVE-2024-41108: FOG Sensitive Information Disclosurehttps://agentprime.io/advisories/CVE-2024-41108/https://agentprime.io/advisories/CVE-2024-41108/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jul 2024 19:04:59 GMTCVECVE-2024-40645: FOG Authenticated File Upload RCEhttps://agentprime.io/advisories/CVE-2024-40645/https://agentprime.io/advisories/CVE-2024-40645/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jul 2024 18:57:50 GMTCVECVE-2024-39916: NFS server misconfiguration allows file access outside the exported directoryhttps://agentprime.io/advisories/CVE-2024-39916/https://agentprime.io/advisories/CVE-2024-39916/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jul 2024 15:00:10 GMTCVECVE-2024-39914: FOG has a command injection in /fog/management/export.php?filename=https://agentprime.io/advisories/CVE-2024-39914/https://agentprime.io/advisories/CVE-2024-39914/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.23 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jul 2024 14:46:44 GMTCVEcriticalCVE-2023-46237: FOG path traversal via unauthenticated endpointhttps://agentprime.io/advisories/CVE-2023-46237/https://agentprime.io/advisories/CVE-2023-46237/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Oct 2023 14:59:37 GMTCVECVE-2023-46236: FOG SSRF via unauthenticated endpoint(s)https://agentprime.io/advisories/CVE-2023-46236/https://agentprime.io/advisories/CVE-2023-46236/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Oct 2023 14:32:32 GMTCVECVE-2023-46235: FOG stored XSS on log screen via unsanitized request logginghttps://agentprime.io/advisories/CVE-2023-46235/https://agentprime.io/advisories/CVE-2023-46235/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Oct 2023 14:25:12 GMTCVE