CVE-2026-47718
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.
Risk Assessment
Unauthorized users can access sensitive project, alarm, and scheduler data, potentially leading to confidentiality and integrity breaches in industrial systems.
Recommendation
Upgrade FUXA to version 1.3.1 or later that includes the fix. Ensure authentication mechanisms are properly configured.
Original NVD description (English source)
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.