FU
Product
FUXA
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 13Medium 5Low 1
Watch
Add FUXA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43947 | 8.9 | Jul 21 | FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass Affected: = 1.3.0 |
| CVE-2026-43945 | 8.9 | Jul 21 | FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection Affected: >= 1.2.11, < 1.3.1 |
| CVE-2026-47719 | 8.2 | Aug 18 | FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading Affected: < 1.3.2 |
| CVE-2026-43946 | 7.7 | Jul 21 | FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue Affected: = 1.3.0 |
| CVE-2026-65984 | 7.5 | Aug 18 | FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions Affected: < 1.3.3 |
| CVE-2026-47717 | 7.5 | Aug 12 | FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations Affected: = 1.3.0 |
| CVE-2026-72586 | 7.5 | Aug 10 | frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler Affected: through 1.3.3 |
| CVE-2026-25751 | 7.5 | Feb 6 | FUXA Unauthenticated Exposure of Plaintext Database Credentials Affected: < 1.2.10 |
| CVE-2023-31718 | 7.5 | Sep 22 | FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download Affected: through 1.1.12 |
| CVE-2023-31717 | 7.5 | Sep 22 | A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database Affected: through 1.1.12 |
| CVE-2023-31716 | 7.5 | Sep 22 | FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log Affected: through 1.1.12 |
| CVE-2021-45851 | 7.5 | Mar 16 | A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services,… Affected: 1.1.3 |
| CVE-2026-25951 | 7.2 | Feb 9 | FUXA has a Path Traversal Sanitization Bypass Affected: < 1.2.11 |
Showing 13