CVE-2026-25895

CVE-2026-25895 affects FUXA (web-based Process Visualization) up to version 1.2.9. It describes a path traversal vulnerability that allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. The issue is patched in version 1.2.10. In pract...