Frangoteam vulnerabilities

Products

• Fuxa 33
• Frangoteam 3

Newest

• frangoteam A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version... CVE-2026-42949 5.6 MediumOctober 29, 2026
• frangoteam A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA ... CVE-2026-40063 5.3 MediumOctober 29, 2026
• frangoteam A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1... CVE-2026-42922 9.8 CriticalOctober 29, 2026
• frangoteam fuxa FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup CVE-2026-67442 2.0 LowAugust 18, 2026
• frangoteam fuxa FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions CVE-2026-65984 7.5 HighAugust 18, 2026
• frangoteam fuxa FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution) CVE-2026-67443 9.2 CriticalAugust 18, 2026
• frangoteam fuxa FUXA: SSRF hardening for `device-webapi-request` CVE-2026-65985 6.0 MediumAugust 18, 2026
• frangoteam fuxa FUXA: Unauthenticated Socket.IO read events CVE-2026-67440 6.9 MediumAugust 18, 2026
• frangoteam fuxa frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler CVE-2026-72586 7.5 HighAugust 10, 2026
• frangoteam fuxa scada/hmi Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing CVE-2026-13207 8.7 HighJune 30, 2026
• frangoteam fuxa FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions CVE-2026-47721 6.3 MediumJune 8, 2026
• frangoteam fuxa FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString CVE-2026-47720 5.3 MediumJune 8, 2026
• frangoteam fuxa FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading CVE-2026-47719 8.2 HighJune 8, 2026
• frangoteam fuxa FUXA provides guest and invalid-token access to protected read APIs in secure mode CVE-2026-47718 Fix available 5.5 MediumMay 28, 2026
• frangoteam fuxa FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations CVE-2026-47717 Fix available 7.5 HighMay 27, 2026
• frangoteam fuxa FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass CVE-2026-43947 Fix available 8.9 HighMay 26, 2026
• frangoteam fuxa FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue CVE-2026-43946 Fix available 7.7 HighMay 26, 2026
• frangoteam fuxa FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection CVE-2026-43945 Fix available 8.9 HighMay 26, 2026
• frangoteam fuxa FUXA has JWT Authentication Bypass via HTTP Referer header spoofing CVE-2025-69985 Public exploit 9.8 CriticalFebruary 24, 2026
• frangoteam fuxa FUXA has a Path Traversal Sanitization Bypass CVE-2026-25951 Fix available 8.6 HighFebruary 9, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Arbitrary Scheduler Write CVE-2026-25939 Public exploitFix available EPSS 12.5% 9.3 CriticalFebruary 9, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Code Execution in Node-RED Integration CVE-2026-25938 Public exploitFix available 9.5 CriticalFebruary 9, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Arbitrary Device Tag Write CVE-2026-25752 Fix available 9.3 CriticalFebruary 5, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API CVE-2026-25895 Public exploitFix available EPSS 12.8% 9.5 CriticalFebruary 5, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration CVE-2026-25894 Fix available 9.5 CriticalFebruary 5, 2026
• frangoteam fuxa FUXA Unauthenticated Exposure of Plaintext Database Credentials CVE-2026-25751 Fix available 9.1 CriticalFebruary 5, 2026
• frangoteam fuxa FUXA Unauthenticated Remote Code Execution via Admin JWT Minting CVE-2026-25893 Fix available 10.0 CriticalFebruary 5, 2026
• frangoteam fuxa FUXA allows Remote Code Execution (RCE) via the project import functionality. CVE-2025-69983 9.8 CriticalFebruary 3, 2026
• frangoteam fuxa FUXA contains an Unrestricted File Upload vulnerability CVE-2025-69981 9.8 CriticalFebruary 3, 2026
• frangoteam fuxa Duplicate Advisory: FUXA contains a hard-coded credential vulnerability CVE-2025-69971 Fix available 9.8 CriticalFebruary 3, 2026
• frangoteam fuxa FUXA contains an insecure default configuration vulnerability CVE-2025-69970 9.3 CriticalFebruary 3, 2026
• frangoteam fuxa FUXA SQL Injection vulnerability CVE-2023-31719 Public exploit EPSS 44.4% 9.8 CriticalSeptember 21, 2023
• frangoteam fuxa FUXA local file inclusion vulnerability CVE-2023-31718 Public exploit 7.5 HighSeptember 21, 2023
• frangoteam fuxa FUXA SQL Injection vulnerability CVE-2023-31717 Public exploit 7.5 HighSeptember 21, 2023
• frangoteam fuxa FUXA vulnerable to Local File Inclusion CVE-2023-31716 Public exploit 7.5 HighSeptember 21, 2023
• frangoteam fuxa A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA CVE-2023-33831 Public exploit EPSS 26.0% 9.8 CriticalSeptember 18, 2023
• frangoteam fuxa Server-Side Request Forgery in FUXA CVE-2021-45851 7.5 HighMarch 16, 2022