Description
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is expected to be released 9/15/2025. To address this vulnerability immediately, upgrade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned about immediate exposure. See the FOG Project documentation for step-by-step upgrade instructions: https://docs.fogproject.org/en/latest/install-fog-server#choosing-a-fog-version.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FOGProject | fogproject | <= 1.5.10.1673 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
casp3r0x0/CVE-2025-58443 ★ 2 · Sep 6, 2025
FOGProject Authentication bypass CVE-2025-58443 Exploit
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- FOGProject < 1.5.10.1693 - Authentication Bypass http/cves/2025/CVE-2025-58443.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.