CVE-2026-116778 - FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
CVE ID :CVE-2026-116778 Published : Oct. 28, 2026, 3:49 p.m. | 34 minutes ago Description :FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API...