CVE-2026-42922EUVD-2026-112581
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809).
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
Summary
FUXA, a web-based SCADA and industrial visualization application, is affected by an authorization bypass in its Node-RED functionality. An unauthenticated attacker can send a specially crafted HTTP request to run arbitrary code on the affected system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Affected versions
- frangoteam Frangoteam
1.3.2-2809