5 matches found
CVE-2026-65985 FUXA: SSRF hardening for `device-webapi-request`
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...
6CVSS5.5AI score
SaveExploits0References6
20