fuxa-server

6 results · Clear filters · Feed

• Critical 9.5
  CVE-2026-25895 Public exploit EPSS 13%

  FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

  FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This affects FUXA through ver…

  frangoteam FUXA fuxa-server npm
  Feb 9, 2026
• Critical 9.3
  CVE-2026-25939 Public exploit EPSS 13%

  FUXA Unauthenticated Remote Arbitrary Scheduler Write

  FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing conne…

  frangoteam FUXA fuxa-server npm
  Feb 9, 2026
• Critical 9.5
  CVE-2026-25938 Public exploit

  FUXA Unauthenticated Remote Code Execution in Node-RED Integration

  FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is …

  frangoteam FUXA fuxa-server npm
  Feb 9, 2026
• Critical 9.8
  CVE-2023-31719 Public exploit EPSS 44%

  FUXA SQL Injection vulnerability

  FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

  fuxa-server npm
  Sep 21, 2023
• High 7.5
  CVE-2023-31718 Public exploit

  FUXA local file inclusion vulnerability

  FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.

  fuxa-server npm
  Sep 21, 2023
• High 7.5
  CVE-2023-31717 Public exploit

  FUXA SQL Injection vulnerability

  A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.

  fuxa-server npm
  Sep 21, 2023