Skip to content
Threat Feed
Subscribe

Vendor

Frangoteam

3 briefs RSS
critical advisory

Frangoteam Fuxa: Remote Command Execution via /api/runscript (CVE-2023-33831)

Frangoteam Fuxa version 1.1.13 contains an unauthenticated remote command execution vulnerability in the /api/runscript endpoint due to improper sanitization of the code parameter.

Fuxa +1 remote-code-execution cve web-application injection scada ics auth-bypass
2r 3t 2c updated
high advisory

FUXA Unauthenticated Project Data Disclosure Vulnerability

FUXA v1.3.0-2773 is vulnerable to unauthenticated project data disclosure (CVE-2026-47717) via the /api/project endpoint, exposing sensitive configuration data like scripts and device settings, even with security enabled.

FUXA v1.3.0-2773 cve unauthenticated-access data-disclosure ics scada
2r 1t
critical advisory

FUXA 1.2.8 Authentication Bypass and Remote Command Execution Vulnerability

FUXA 1.2.8 and earlier is vulnerable to an authentication bypass vulnerability (CVE-2025-69985) that allows remote command execution by exploiting the /api/runscript endpoint with a crafted JavaScript payload.

FUXA authentication-bypass remote-code-execution web-application scada
2r 2t 1c