Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-47717

FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

frangoteam FUXA

  • = 1.3.0affected

References