CVE-2026-24138highCWE-918

CVE-2026-24138: fallo de gravedad alta en fogproject

FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php`

Publicada el

Seguir esta CVE+ Monitorear fogproject

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 0.4%
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1754 and below contain an unauthenticated SSRF vulnerability in getversion.php which can be triggered by providing a user-controlled url parameter. It can be used to fetch both internal websites and files on the machine running FOG. This appears to be reachable without an authenticated web session when the request includes newService=1. The issue does not have a fixed release version at the time of publication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
FOGProject · fogproject
CVEs relacionadas — fogproject

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-39914CRITICAL FOG has a command injection in /fog/management/export.php?filename=EPSS 23.2%CVE-2025-58443CRITICALFOG's authentication bypass leads to full SQL DB dumpEPSS 21.3%CVE-2024-40645HIGHFOG Authenticated File Upload RCEEPSS 1.0%CVE-2024-42348CRITICALFOG leaks sensitive information (AD domain, username and password)EPSS 0.6%CVE-2026-54554HIGHFOG adInfo endpoint is reported to disclose the Active Directory join passwordEPSS 0.6%CVE-2023-46237MEDIUMFOG path traversal via unauthenticated endpointEPSS 0.6%