Advisories · Technology
frangoteam FUXA.
Every CVE that names frangoteam FUXA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.0 Low
FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup
- frangoteam FUXA
- Broken access control
- CWE-459
- CVSS 7.5 High
FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions
- frangoteam FUXA
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)
- frangoteam FUXA
- Broken access control
- CVSS 6.0 Medium
FUXA: SSRF hardening for `device-webapi-request`
- frangoteam FUXA
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
FUXA: Unauthenticated Socket.IO read events
- frangoteam FUXA
- Broken access control
- CVSS 7.5 High
frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler
- frangoteam FUXA
- Authentication bypass