EUVD-2026-61209

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not consistently enforce authJwt.haveAdminPermission for scheduler settings. An authenticated non-admin operator can create or...

CVE-2026-61209

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sw2ebq2v 2026-07-23 18:17:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...