CVE-2026-42949

An authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version 1.3.2-2809). A specially crafted, unauthenticated HTTP request can be used by an attacker to trigger this vulnerability and execute privileged operations . No specific remediation or exploit details ...