EUVD-2026-9941

🗓️ 06 Mar 2026 00:31:35Reported by EUVDType

EUVD-2026-9941 reports unauthenticated remote code execution in FUXA via admin token minting.

Reporter	Title	Published	Views	Family All 57
GithubExploit	Exploit for Missing Authentication for Critical Function in Frangoteam Fuxa	24 Apr 202621:26	–	githubexploit
ATTACKERKB	CVE-2026-25895	9 Feb 202622:29	–	attackerkb
ATTACKERKB	CVE-2026-25894	9 Feb 202622:28	–	attackerkb
ATTACKERKB	CVE-2026-25893	9 Feb 202622:26	–	attackerkb
ATTACKERKB	CVE-2026-2589	5 Mar 202623:21	–	attackerkb
Circl	CVE-2026-2589	6 Mar 202602:43	–	circl
Circl	CVE-2026-25893	10 Feb 202603:00	–	circl
Circl	CVE-2026-25894	10 Feb 202601:30	–	circl
Circl	CVE-2026-25895	10 Feb 202600:00	–	circl
CNNVD	FUXA 访问控制错误漏洞	9 Feb 202600:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "2b79a163-1cda-3ae4-9058-4e80df6d26fd",
        "vendor": {
          "name": "wpsoul"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "368416e0-247c-3166-9d41-d912d1671872",
        "product": {
          "name": "Greenshift – animation and page builder blocks"
        },
        "product_version": "* ≤12.8.3"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65
plugins	www.plugins.trac.wordpress.org/changeset/3465111/
github	www.github.com/frangoteam/FUXA/security/advisories/GHSA-32cc-x95p-fxcg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25894
github	www.github.com/frangoteam/FUXA/commit/ea7b3df066f9fdef8ecdce318398ae40546bc50d
github	www.github.com/frangoteam/FUXA/releases/tag/v1.2.10
github	www.github.com/frangoteam/FUXA/security/advisories/GHSA-88qh-cphv-996c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25895
github	www.github.com/frangoteam/FUXA/commit/22c2192f5d9beef8a787c45eff3a14c24dbb5f96
github	www.github.com/frangoteam/FUXA/security/advisories/GHSA-vwcg-c828-9822

06 Mar 2026 00:31Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3 - 9.8

CVSS 410

EPSS0.02675

SSVC