Product by Frangoteam

    FUXA

    33 known vulnerabilities in FUXA (Frangoteam), 0 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    15

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in FUXA (Frangoteam)
    CriticalCVE-2026-25895

    FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

    		9.8
    CriticalCVE-2026-25939

    FUXA Unauthenticated Remote Arbitrary Scheduler Write

    		9.1
    CriticalCVE-2025-69985

    FUXA: Authentication Bypass

    		9.8
    CriticalCVE-2023-31719

    FUXA: SQL Injection

    		9.8
    CriticalCVE-2023-33831

    FUXA: Remote Code Execution

    		9.8
    CriticalCVE-2025-69971

    FUXA: Hard-coded Credentials

    		9.8
    HighCVE-2026-47717

    FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

    		7.5
    HighCVE-2026-25951

    FUXA has a Path Traversal Sanitization Bypass

    		7.2
    CriticalCVE-2026-25938

    FUXA Unauthenticated Remote Code Execution in Node-RED Integration

    		9.8
    HighCVE-2026-43947

    FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass

    		—
    HighCVE-2026-43945

    FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

    		—
    CriticalCVE-2026-67443

    Frangoteam FUXA: Missing Authorization

    		—
    HighCVE-2023-31717

    FUXA: SQL Injection

    		7.5
    CriticalCVE-2026-25894

    FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

    		9.8
    HighCVE-2023-31718

    FUXA: security vulnerability

    		7.5
    CriticalCVE-2025-69981

    FUXA: Unrestricted File Upload

    		9.8
    CriticalCVE-2026-25893

    FUXA Unauthenticated Remote Code Execution via Admin JWT Minting

    		9.8
    HighCVE-2023-31716

    FUXA: File Inclusion

    		7.5
    HighCVE-2026-47719

    Frangoteam FUXA: Server-Side Request Forgery (SSRF)

    		8.2
    HighCVE-2021-45851

    FUXA: Server-Side Request Forgery (SSRF)

    		7.5
    HighCVE-2026-72586

    frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler

    		7.5
    CriticalCVE-2025-69983

    FUXA: Remote Code Execution

    		9.8
    HighCVE-2026-43946

    FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue

    		—
    CriticalCVE-2026-25752

    FUXA Unauthenticated Remote Arbitrary Device Tag Write

    		9.1
    CriticalCVE-2025-69970

    FUXA: security vulnerability

    		9.3

    All vulnerabilities in search

    All products by Frangoteam