Login Request a demo
FU
Product
FUXA
by frangoteam · last CVE Aug 18, 2026
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 14High 13Medium 5Low 1
Severity
All severities33Critical14High13Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FUXA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-69985
9.8
6%
Feb 24
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE)
Affected: through 1.2.8
CVE-2026-25895
9.8
13%
Feb 9
FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API
Affected: < 1.2.10
CVE-2026-25894
9.8
1%
Feb 9
FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration
Affected: < 1.2.10
CVE-2026-25893
9.8
1%
Feb 9
FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
Affected: < 1.2.10
CVE-2026-25938
9.8
1%
Feb 9
FUXA Unauthenticated Remote Code Execution in Node-RED Integration
Affected: >= 1.2.8, < 1.2.11
CVE-2025-69981
9.8
1%
Feb 3
FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint
Affected: 1.2.7
CVE-2025-69971
9.8
2%
Feb 3
FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js
Affected: 1.2.7
CVE-2025-69983
9.8
0%
Feb 3
FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality
Affected: 1.2.7
CVE-2023-31719
9.8
26%
Sep 22
FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin
Affected: through 1.1.12
CVE-2023-33831
9.8
26%
Sep 18
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request
Affected: 1.1.13
CVE-2025-69970
9.3
1%
Feb 3
FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js
Affected: 1.2.7
CVE-2026-67443
9.2
1%
Aug 18
FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)
Affected: < 1.3.3
CVE-2026-25939
9.1
13%
Feb 9
FUXA Unauthenticated Remote Arbitrary Scheduler Write
Affected: < 1.2.11
CVE-2026-25752
9.1
1%
Feb 6
FUXA Unauthenticated Remote Arbitrary Device Tag Write
Affected: < 1.2.10
Showing 14