CVE-2026-43946

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue...

CVE-2026-47717

creationtimestamp| type| source ---|---|--- 2026-05-26 16:06:13+00:00| published-proof-of-concept| https://github.com/frangoteam/FUXA/security/advisories/GHSA-q3w6-q3hc-c5x6 2026-06-18 02:57:08+00:00| confirmed|...

EUVD-2026-9941

FUXA Unauthenticated Remote Code Execution via Admin JWT Minting...

PT-2026-7187

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.2.11 Description FUXA is a web-based Process Visualization software. A flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections...

FUXA Runscript Code Execution

The vulnerability of the runscript script of the SCADA/HMI process visualization platform FUXA is related to the failure to take measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...