CVE-2026-25938

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled. This has been patched in FUXA...

CVE-2026-25938 FUXA Unauthenticated Remote Code Execution in Node-RED Integration

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled. This has been patched in FUXA...

CVE-2026-25938

CVE-2026-25938 affects FUXA (web-based Process Visualization) versions 1.2.8–1.2.10. A vulnerability in the Node-RED plugin allows an unauthenticated attacker to bypass authentication and execute arbitrary code on the server. The issue has been fixed in version 1.2.11. The CVSS v4.0 base score is...

CVE-2026-25938 FUXA Unauthenticated Remote Code Execution in Node-RED Integration

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled. This has been patched in FUXA...

Authentication Bypass

FUXA-server is vulnerable to an Authentication Bypass. The vulnerability is due to improper authentication enforcement when the Node-RED plugin is enabled, which allows an unauthenticated remote attacker to execute arbitrary code on the server...

PT-2026-7182

Name of the Vulnerable Software and Affected Versions FUXA versions 1.2.8 through 1.2.10 Description FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authentication bypass in FUXA allows a remote attacker to execute arbitrary code on the server when the Node-RED plugin i...

FUXA 访问控制错误漏洞

FUXA is a web-based process visualization software developed by frangoteam. Versions 1.2.8 to 1.2.10 of FUXA contain an access control vulnerability. This vulnerability stems from an authentication bypass when the Node-RED plugin is enabled, allowing unverified remote attackers to execute arbitra...

EUVD-2021-0559

Malware in sbrugna...

EUVD-2019-0719

Malware in sbrugna...

EUVD-2020-0258

Malware in sbrugna...

EUVD-2021-0581

Malware in sbrugna...

EUVD-2021-13309

Malware in sbrugna...

EUVD-2025-13263

Malicious code in bioql PyPI...

EUVD-2022-7442

Malicious code in bioql PyPI...

electron-staff (=1.0.0), https-curl (=1.7.9) +2 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=0.0.0-development <=1.15.1)

screenshot-desktop NPM version =0.0.0-development, =1.0.0, =1.0.1 Source cves: CVE-2025-55294 Source advisory: OSV:GHSA-GJX4-2C7G-FM94...

https-curl (=1.7.9), multi-installer (=0.0.1) +1 more potentially affected by CVE-2025-55294 via screenshot-desktop (>=1.15.0 <=1.15.1)

screenshot-desktop NPM version =1.15.0, =1.0.0, =1.0.1 Source cves: CVE-2025-55294 Source advisory: SNYK:JS-SCREENSHOTDESKTOP-12028632...

Malicious code in node-red-contrib-ys7 (npm)

The package node-red-contrib-ys7 was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-s (npm)

The package @zalastax/nolb-node-red-s was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)

The package @zalastax/nolb-node-red-contrib-2 was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-cb (npm)

The package @zalastax/nolb-node-red-cb was found to contain malicious code...