PT-2025-36400

CVE-2025-58443

Published

2025-09-06

Updated

2026-10-14

Description by

CVSS 4.0

9.9

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions FOG versions 1.5.10.1673 and below

Description FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass that allows an unauthenticated attacker to perform a full SQL database dump without credentials.

Recommendations Upgrade to the latest version of either the dev-branch or working-1.6 branch.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function

CWE-287: Improper Authentication

Related identifiers