Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2026-47718

FUXA provides guest and invalid-token access to protected read APIs in secure mode

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

frangoteam FUXA

  • = 1.3.0-2773affected

References