Authentication Bypass in FOG Imaging and Inventory Management System
CVE-2025-58443
Key Information:
- Vendor
Fogproject
- Status
- Vendor
- CVE Published:
- 6 September 2025
Badges
What is CVE-2025-58443?
The FOG Imaging and Inventory Management System contains a vulnerability that allows attackers to bypass authentication and access the underlying database without proper credentials. Specifically, in versions 1.5.10.1673 and earlier, it is possible for an unauthorized individual to execute an unauthenticated database dump, potentially leading to a complete SQL database extraction. Users are encouraged to upgrade to the latest version from the dev-branch or working-1.6 branch to mitigate these risks. Detailed upgrade instructions can be found in the FOG Project documentation.
Affected Version(s)
fogproject <= 1.5.10.1673
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.