HIGH 7.5 NVD
CVE-2026-47717
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue.
References
- https://github.com/frangoteam/FUXA/releases/tag/v1.3.1
- https://github.com/frangoteam/FUXA/security/advisories/GHSA-q3w6-q3hc-c5x6
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-08-12 via NVD.
vulnfeed aggregates 10530 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.