Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-42922 EUVD-2026-112581GHSA-24fv-gm68-rm6q

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP reques…

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by talos

Vendor: frangoteam Product: Frangoteam

Description

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
frangoteam Frangoteam 1.3.2-2809 —

References