Priority HIGH 82
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06021 · Published 2026-02-24 · No fix listed CWE-288
Priority HIGH 82
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.25951 · Published 2023-09-18 · No fix listed CWE-77
Priority HIGH 82
FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44363 · Published 2023-09-21 · No fix listed CWE-89
Priority HIGH 80
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00911 · Published 2026-07-21 · Fixed in 1.3.1 CWE-863
Priority HIGH 75
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00592 · Published 2026-08-18 · Fixed in 1.3.2 CWE-918
Priority HIGH 73
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00567 · Published 2026-07-21 · Fixed in 1.3.1 CWE-863
Priority HIGH 72
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01375 · Published 2026-08-12 · Fixed in 1.3.1 CWE-201
Priority HIGH 72
FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01734 · Published 2023-09-21 · No fix listed CWE-98
Priority HIGH 72
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01835 · Published 2023-09-21 · No fix listed CWE-89
Priority MEDIUM 64
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0MEDIUM 5.5· Network · No auth · No interaction · EPSS 0.00458 · Published 2026-08-12 · Fixed in 1.3.1 CWE-287
Priority MEDIUM 62
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.12536 · Published 2026-02-09 · Fixed in 1.2.11 CWE-862
Priority MEDIUM 57
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.1285 · Published 2026-02-09 · Fixed in 1.2.10 CWE-22
Priority MEDIUM 53
FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02174 · Published 2026-02-03 · Fixed in 1.3.0 CWE-798
Priority MEDIUM 51
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.01057 · Published 2026-02-09 · Fixed in 1.2.11 CWE-290
Priority MEDIUM 50
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00534 · Published 2026-10-29 · No fix listed CWE-285
Priority MEDIUM 50
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00758 · Published 2026-02-09 · Fixed in 1.2.10 CWE-285
Priority MEDIUM 50
FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00806 · Published 2026-02-03 · No fix listed CWE-434
Priority MEDIUM 49
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00531 · Published 2026-02-06 · Fixed in 1.2.10 CWE-862
Priority MEDIUM 49
FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00499 · Published 2026-02-03 · No fix listed CWE-94
Priority MEDIUM 49
FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00517 · Published 2026-02-03 · No fix listed CWE-1188
Priority MEDIUM 48
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00839 · Published 2026-07-21 · Fixed in 1.3.1 CWE-284
Priority MEDIUM 45
FUXA versions 1.3.1 and prior contain an authentication bypass vulnerability via dot-segment path normalization in the REST API.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-06-30 · Fixed in 1.3.2 CWE-290
Priority MEDIUM 44
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.00842 · Published 2026-02-09 · Fixed in 1.2.10 CWE-1188
Priority MEDIUM 43
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00686 · Published 2026-08-18 · Fixed in 1.3.3 CWE-862
Priority MEDIUM 42
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.0136 · Published 2026-02-09 · Fixed in 1.2.11 CWE-184
Load more
THREATIST.IORead the docs