| FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdStringCVE-2026-47720 · GHSA-H9FJ-C2QR-76G2 |
fuxa-server |
npm |
Medium
|
No fix reported |
|
| FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response readingCVE-2026-47719 · GHSA-W86F-RF9W-H3X6 |
fuxa-server |
npm |
High
|
No fix reported |
|
| FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actionsCVE-2026-47721 · GHSA-8GHR-W65F-J3QR |
fuxa-server |
npm |
Medium
|
No fix reported |
|
| FUXA provides guest and invalid-token access to protected read APIs in secure modeCVE-2026-47718 · GHSA-R9G5-7Q8J-958C |
fuxa-server |
npm |
Medium
|
Fix reported |
|
| FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device ConfigurationsCVE-2026-47717 · GHSA-Q3W6-Q3HC-C5X6 |
fuxa-server |
npm |
High
|
Fix reported |
|
| FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization BypassCVE-2026-43947 · GHSA-RG3M-CFQ7-G6H6 |
fuxa-server |
npm |
High
|
Fix reported |
|
| FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValueCVE-2026-43946 · GHSA-FWCM-RQVW-J3P7 |
fuxa-server |
npm |
High
|
Fix reported |
|
| FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload APICVE-2026-25895 · GHSA-88QH-CPHV-996C |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA Affected by a Path Traversal Sanitization BypassCVE-2026-25951 · GHSA-68M5-5W2H-H837 |
fuxa-server |
npm |
High
|
Fix reported |
|
| FUXA allows Remote Code Execution (RCE) via the project import functionality.CVE-2025-69983 · GHSA-5R63-Q8HG-P8QX |
fuxa-server |
npm |
High
|
No fix reported |
|
| FUXA contains an Unrestricted File Upload vulnerabilityCVE-2025-69981 · GHSA-7G56-FWXJ-CM23 |
fuxa-server |
npm |
High
|
No fix reported |
|
| FUXA Unauthenticated Remote Code Execution via Admin JWT MintingCVE-2026-25893 · GHSA-VWCG-C828-9822 |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA Unauthenticated Remote Arbitrary Scheduler WriteCVE-2026-25939 · GHSA-C869-JX4C-Q5FC |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA Unauthenticated Remote Code Execution in Node-RED IntegrationCVE-2026-25938 · GHSA-V4P5-W6R3-2X4F |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default ConfigurationCVE-2026-25894 · GHSA-32CC-X95P-FXCG |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA contains an insecure default configuration vulnerabilityCVE-2025-69970 · GHSA-R5M2-FQCF-QRF7 |
fuxa-server |
npm |
High
|
No fix reported |
|
| FUXA Unauthenticated Exposure of Plaintext Database CredentialsCVE-2026-25751 · GHSA-C5GQ-4H56-4MMX |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA Unauthenticated Remote Arbitrary Device Tag WriteCVE-2026-25752 · GHSA-GGXW-G3CP-MGF8 |
fuxa-server |
npm |
Critical
|
Fix reported |
|
| FUXA local file inclusion vulnerabilityCVE-2023-31718 · GHSA-WWFJ-H843-3HRQ |
fuxa-server |
npm |
High
|
No fix reported |
|
| FUXA SQL Injection vulnerabilityCVE-2023-31719 · GHSA-P46G-8C3Q-89P2 |
fuxa-server |
npm |
Critical
|
No fix reported |
|
