frangoteam

Top products

The 15 most recently published vulnerabilities affecting frangoteam.

• CVE-2026-67442FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup2.0Aug 18, 2026
• CVE-2026-47721FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions6.3Aug 18, 2026
• CVE-2026-47719FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading8.2Aug 18, 2026
• CVE-2026-47720FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString5.3Aug 18, 2026
• CVE-2026-47717FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations7.5Aug 12, 2026
• CVE-2026-72586frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler7.5Aug 10, 2026
• CVE-2026-13207Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing7.5Jun 30, 2026
• CVE-2025-69985FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the server/api/jwt-helper.js middleware, which improperly tr...9.8Feb 24, 2026
• CVE-2026-25895FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API9.8Feb 9, 2026
• CVE-2026-25894FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration9.8Feb 9, 2026
• CVE-2026-25893FUXA Unauthenticated Remote Code Execution via Admin JWT Minting9.8Feb 9, 2026
• CVE-2026-25951FUXA has a Path Traversal Sanitization Bypass7.2Feb 9, 2026
• CVE-2026-25939FUXA Unauthenticated Remote Arbitrary Scheduler Write9.1Feb 9, 2026
• CVE-2026-25938FUXA Unauthenticated Remote Code Execution in Node-RED Integration9.8Feb 9, 2026
• CVE-2026-25751FUXA Unauthenticated Exposure of Plaintext Database Credentials7.5Feb 6, 2026