FU
Product
FUXA
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 13Medium 5Low 1
Watch
Add FUXA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67440 | 6.9 | Aug 18 | FUXA: Unauthenticated Socket.IO read events Affected: < 1.3.3 |
| CVE-2026-47721 | 6.3 | Aug 18 | FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions Affected: < 1.3.2 |
| CVE-2026-65985 | 6.0 | Aug 18 | FUXA: SSRF hardening for `device-webapi-request` Affected: < 1.3.3 |
| CVE-2026-47718 | 5.5 | Aug 12 | FUXA provides guest and invalid-token access to protected read APIs in secure mode Affected: = 1.3.0-2773 |
| CVE-2026-47720 | 5.3 | Aug 18 | FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString Affected: < 1.3.2 |
Showing 5