CVE-2026-116778Published
FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-116778 · Microsoft / collected KEV context
cve-program · CVE-2026-116778
- https://github.com/FOGProject/fogproject/security/advisories/GHSA-2hqx-5ffg-w4c3
- https://github.com/FOGProject/fogproject/pull/1001
- https://github.com/FOGProject/fogproject/commit/3098e4423588951d8f0cedac79b9b102f036761e
- https://github.com/FOGProject/fogproject/commit/aeda5bc536e3eec0200366d6b109a66798abc438
- https://github.com/FOGProject/fogproject/releases/tag/1.5.10.2253
- https://github.com/FOGProject/fogproject/releases/tag/1.6.0-RC-1
Related operational evidence
Explicit CVE identifiers- FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution · Newly collected advisory · 28 Oct 2026