Skip to content
OpenAdvisories

Package · npm

fuxa-server

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-25895 Public exploit Scanner template EPSS 13%

    FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

    FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This affects FUXA through ver…

    frangoteam FUXA fuxa-server npm
  • Critical 9.3
    CVE-2026-25939 Public exploit Scanner template EPSS 13%

    FUXA Unauthenticated Remote Arbitrary Scheduler Write

    FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing conne…

    frangoteam FUXA fuxa-server npm
  • Critical 9.5
    CVE-2026-25938 Public exploit

    FUXA Unauthenticated Remote Code Execution in Node-RED Integration

    FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is …

    frangoteam FUXA fuxa-server npm
  • Critical 9.8
    CVE-2023-31719 Public exploit Scanner template EPSS 44%

    FUXA SQL Injection vulnerability

    FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

    fuxa-server npm