https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-47689.htmlhttps://patchthecve.com/cve/CVE-2026-47689.htmlFri, 07 Aug 2026 13:53:14 +0000MEDIUM 4.6: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php` substitutes data values into HTML table cell templates using `str_replace()` without any HTML escaping. An unauthentichttps://patchthecve.com/cve/CVE-2026-47688.htmlhttps://patchthecve.com/cve/CVE-2026-47688.htmlFri, 07 Aug 2026 13:52:34 +0000HIGH 8.2: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `clearAES` and `clearPMTasks` methods in `FOGPage` can be invoked by an unauthenticated attacker via a single HTTP GET request through the public `client` node ehttps://patchthecve.com/cve/CVE-2026-47687.htmlhttps://patchthecve.com/cve/CVE-2026-47687.htmlFri, 07 Aug 2026 13:51:46 +0000HIGH 7.3: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.class.php` renders `<option>` labels using raw, unescaped user input. An unauthenticated attacker who knows any registered hosthttps://patchthecve.com/cve/CVE-2026-47685.htmlhttps://patchthecve.com/cve/CVE-2026-47685.htmlFri, 07 Aug 2026 13:50:16 +0000HIGH 7.3: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the unauthenticated inventory service endpoint (`/service/inventory.php`) persists client-supplied values without sanitization, and the Host Management Inventory pag