CVE Tools
Track your stack

Frangoteam

29 CVEs tracked since 2023. Since Sep 2023, none of them reached CISA KEV.

Frangoteam CVEs per month

Sep 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Frangoteam CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0950
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-02130
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-08110
2026-099 or fewer
2026-103 or fewer

Products

The products that kept showing up in Frangoteam's monthly top three, with their CVEs summed over those months.

  1. Fuxa293 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Frangoteam.

  1. CVE-2026-67442FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup2.0
  2. CVE-2026-65984FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions—
  3. CVE-2026-67443FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)—
  4. CVE-2026-65985FUXA: SSRF hardening for `device-webapi-request`—
  5. CVE-2026-67440FUXA: Unauthenticated Socket.IO read events—
  6. CVE-2026-47721FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions6.3
  7. CVE-2026-47719FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading8.2
  8. CVE-2026-47720FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString5.3
  9. CVE-2026-47718FUXA provides guest and invalid-token access to protected read APIs in secure mode—
  10. CVE-2026-47717FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations7.5
  11. CVE-2026-72586frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler7.5
  12. CVE-2026-43947FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass—
  13. CVE-2026-43946FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue—
  14. CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection—
  15. CVE-2026-13207Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing7.5

The record

Peak rank
#73 in Feb 2026
Busiest month shown
Feb 2026, 13 CVEs
Months with a KEV entry
0 since Sep 2023
Monthly snapshots
3 since 2023
Frangoteam's full record, month by month