CVE-2026-54554

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-54554

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54554.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-54554

Aliases

GHSA-q9gc-h2qc-qmx8

Published

2026-10-14T18:08:03Z

Modified

2026-10-28T02:31:11Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

FOG adInfo endpoint is reported to disclose the Active Directory join password

Details

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo() endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOG_AD_DEFAULT_PASSWORD value in its domainpass JSON field and to be dispatchable through node=ipxe without an authenticated session. The response was also consumed by host and group Active Directory configuration interfaces. This could disclose the default domain-join credential to a remote unauthenticated requester. This vulnerability is fixed in 1.5.10.1870.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-200"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54554.json"
}

References

Affected packages

Git / github.com/fogproject/fogproject

Affected ranges

Type

GIT

Repo

https://github.com/fogproject/fogproject

Events

Introduced

Fixed

53467775fc9e3f0aaa1c798d5cc30a643923d322

Fixed

26f37fbbc7106aa99c792dbac871a5accf86ab37

Fixed

3b40a794c67ad765dd02aee8e363edd5ee047630

Fixed

f5e00d80707167975f95e5af1cfd8b7efda14dd8

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "1.5.10.1870"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "26f37fbbc7106aa99c792dbac871a5accf86ab37"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "3b40a794c67ad765dd02aee8e363edd5ee047630"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "f5e00d80707167975f95e5af1cfd8b7efda14dd8"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "1.5.10.1870",
            "range": [
                {
                    "fixed": "53467775fc9e3f0aaa1c798d5cc30a643923d322"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

1.*

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.3.5

1.5.10.1565

1.5.10.1566

1.5.10.1593

1.5.10.1615

1.5.10.1622

1.5.10.1629

1.5.10.1634

1.5.10.1639

1.5.10.1650

1.5.10.1655

1.5.10.1660

1.5.10.1667

1.5.10.1673

1.5.10.1698

1.5.10.1721

1.5.10.1733

1.5.10.1734

1.5.10.1751

1.5.10.1754

1.5.10.1763

1.5.10.1798

1.5.10.1812

1.5.10.1815

1.5.10.1826

1.5.10.41

1.5.10.48

1.5.10.74

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54554.json"