THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-47689 (MEDIUM 4.6) — FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php` substitutes data values into HTML table cell templates using `str_replace()` without any HTML esca

[NVD] CVE-2026-47689 (MEDIUM 4.6) — FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php` substitutes data values into HTML table cell templates using `str_replace()` without any HTML esca

mednvdPublished 2026-07-21

CVE-2026-47689 CVSS: 4.6 MEDIUM Published: 2026-07-21T21:16:50.937

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php` substitutes data values into HTML table cell templates using `str_replace()` without any HTML escaping. An unauthenticated attacker who knows any regi

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-47689cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-47689