Filtered by vendor Frangoteam
Subscriptions
Filtered by product Frangoteam
Subscriptions
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-42922 | 1 Frangoteam | 1 Frangoteam | 2026-10-29 | 9.8 Critical |
| A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | ||||
| CVE-2026-40063 | 1 Frangoteam | 1 Frangoteam | 2026-10-29 | 5.3 Medium |
| A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | ||||
| CVE-2026-42949 | 1 Frangoteam | 1 Frangoteam | 2026-10-29 | 5.6 Medium |
| A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | ||||
Page 1 of 1.