CVE-2026-43946

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue...

CVE-2026-47717

creationtimestamp| type| source ---|---|--- 2026-05-26 16:06:13+00:00| published-proof-of-concept| https://github.com/frangoteam/FUXA/security/advisories/GHSA-q3w6-q3hc-c5x6 2026-06-18 02:57:08+00:00| confirmed|...

EUVD-2026-9941

FUXA Unauthenticated Remote Code Execution via Admin JWT Minting...

PT-2026-7187

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.2.11 Description FUXA is a web-based Process Visualization software. A flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections...

The vulnerability of the runscript script of the SCADA/HMI process visualization platform FUXA allows a perpetrator to execute arbitrary code.

The vulnerability of the runscript script of the SCADA/HMI process visualization platform FUXA is related to the failure to take measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...