← Vulnerability feed

Vulnerability record · CVE-2026-25951 · published 9 February 2026

CVE-2026-25951: Frangoteam fuxa path traversal vulnerability

Frangoteam · Fuxa

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections. By using nested traversal sequences (e.g., ....//), an attacker can write arbitrary files to the server filesystem, including sensitive directories like runtime/scripts. This leads to Remote Code Execution (RCE) when the server reloads the malicious scripts. This vulnerability is fixed in 1.2.11.

8.6 CVSS 4.0 High EPSS 1.7% · top 23.4% CWE-22 · Path traversalCWE-23 · Relative path traversal
8.6CVSS 4.0 base score
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic allows an authenticated attacker with administrative privileges to bypass directory traversal protections. By using nested traversal sequences (e.g., ....//), an attacker can write arbitrary files to the server filesystem, including sensitive directories like runtime/scripts. This leads to Remote Code Execution (RCE) when the server reloads the malicious scripts. This vulnerability is fixed in 1.2.11.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/frangoteam/FUXA/commit/f7a9f04b2ab97ab5421e4ec4e711c51e9f4b65c8 Patch
https://github.com/frangoteam/FUXA/releases/tag/v1.2.11 Release Notes
https://github.com/frangoteam/FUXA/security/advisories/GHSA-68m5-5w2h-h837 Vendor Advisory

Track CVE-2026-25951 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-25893Frangoteam fuxa improper authorization vulnerabilityFUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an u…EPSS 1.1%9.8CVE-2025-69985Frangoteam fuxa authentication bypass via alternate path vulnerabilityFUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the server/a…EPSS 5.7%9.8CVE-2025-69971Frangoteam fuxa hard-coded credentials vulnerabilityFUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and veri…EPSS 2.1%9.8CVE-2025-69981Frangoteam fuxa unrestricted file upload vulnerabilityFUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint. The endpoint lacks authentication mechanisms, allow…EPSS 0.77%9.8CVE-2025-69983Frangoteam fuxa code injection vulnerabilityFUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality. The application does not properly sanitize or sandbox user-suppl…EPSS 0.44%9.8CVE-2023-31719Frangoteam fuxa sql injection vulnerabilityFUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.EPSS 26%9.8CVE-2023-33831Frangoteam fuxa command injection vulnerabilityA remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a cra…EPSS 26%9.5CVE-2026-25938Frangoteam fuxa authentication bypass by spoofing vulnerabilityFUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA a…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2026-25951), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.