452 matches found
CVE-2026-65985 FUXA: SSRF hardening for `device-webapi-request`
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...
6CVSS0.00341EPSS
SaveExploits0References4
20