Login Request a demo
FR
Vendor
frangoteam
2 products with CVEs on record
34
CVEs
0
On KEV
0
New 30D
Products
FU
FUXA
frangoteam
9.8
33 CVEs0 on KEV0 new
FS
FUXA SCADA/HMI
Frangoteam
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-67442
FU
FUXA
frangoteam
2.0
0%
Aug 18FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup
CVE-2026-65984
FU
FUXA
frangoteam
7.5
1%
Aug 18FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions
CVE-2026-67443
FU
FUXA
frangoteam
9.2
1%
Aug 18FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)
CVE-2026-65985
FU
FUXA
frangoteam
6.0
0%
Aug 18FUXA: SSRF hardening for `device-webapi-request`
CVE-2026-67440
FU
FUXA
frangoteam
6.9
1%
Aug 18FUXA: Unauthenticated Socket.IO read events
CVE-2026-47721
FU
FUXA
frangoteam
6.3
0%
Aug 18FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions
CVE-2026-47719
FU
FUXA
frangoteam
8.2
1%
Aug 18FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
CVE-2026-47720
FU
FUXA
frangoteam
5.3
1%
Aug 18FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString
CVE-2026-47718
FU
FUXA
frangoteam
5.5
0%
Aug 12FUXA provides guest and invalid-token access to protected read APIs in secure mode
CVE-2026-47717
FU
FUXA
frangoteam
7.5
1%
Aug 12FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
CVE-2026-72586
FU
FUXA
frangoteam
7.5
1%
Aug 10frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler
CVE-2026-43947
FU
FUXA
frangoteam
8.9
1%
Jul 21FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass
CVE-2026-43946
FU
FUXA
frangoteam
7.7
1%
Jul 21FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue
CVE-2026-43945
FU
FUXA
frangoteam
8.9
1%
Jul 21FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection
CVE-2026-13207
FS
FUXA SCADA/HMI
Frangoteam
7.5
1%
Jun 30Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing
CVE-2025-69985
FU
Fuxa
Frangoteam
9.8
6%
Feb 24FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE)
CVE-2026-25895
FU
FUXA
frangoteam
9.8
13%
Feb 9FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API
CVE-2026-25894
FU
FUXA
frangoteam
9.8
1%
Feb 9FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration
CVE-2026-25893
FU
FUXA
frangoteam
9.8
1%
Feb 9FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
CVE-2026-25951
FU
FUXA
frangoteam
7.2
1%
Feb 9FUXA has a Path Traversal Sanitization Bypass
CVE-2026-25939
FU
FUXA
frangoteam
9.1
13%
Feb 9FUXA Unauthenticated Remote Arbitrary Scheduler Write
CVE-2026-25938
FU
FUXA
frangoteam
9.8
1%
Feb 9FUXA Unauthenticated Remote Code Execution in Node-RED Integration
CVE-2026-25751
FU
FUXA
frangoteam
7.5
0%
Feb 6FUXA Unauthenticated Exposure of Plaintext Database Credentials
CVE-2026-25752
FU
FUXA
frangoteam
9.1
1%
Feb 6FUXA Unauthenticated Remote Arbitrary Device Tag Write
CVE-2025-69971
FU
Fuxa
Frangoteam
9.8
2%
Feb 3FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js
CVE-2025-69983
FU
Fuxa
Frangoteam
9.8
0%
Feb 3FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality
CVE-2025-69981
FU
Fuxa
Frangoteam
9.8
1%
Feb 3FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint
CVE-2025-69970
FU
Fuxa
Frangoteam
9.3
1%
Feb 3FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js
CVE-2023-31719
FU
Fuxa
Frangoteam
9.8
26%
Sep 22FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin
CVE-2023-31718
FU
Fuxa
Frangoteam
7.5
2%
Sep 22FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download
CVE-2023-31717
FU
Fuxa
Frangoteam
7.5
2%
Sep 22A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database
CVE-2023-31716
FU
Fuxa
Frangoteam
7.5
1%
Sep 22FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log
CVE-2023-33831
FU
Fuxa
Frangoteam
9.8
26%
Sep 18A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request
CVE-2021-45851
FU
Fuxa
Frangoteam
7.5
1%
Mar 16A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services,…