Frangoteam

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 37
    Known Exploited: 0
    12
    Critical Level Threats
    12
    High Level Threats
    4
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-42949

    Authorization Bypass in FUXA /api/runscript Enables Privileged Execution

    Last Modified: Oct 29, 2026
    Published: Oct 29, 2026

    CVE-2026-40063

    A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

    Last Modified: Oct 29, 2026
    Published: Oct 29, 2026

    CVE-2026-42922

    Unauthorized HTTP-based Remote Code Execution via /nodered Authorization Bypass in FUXA

    Last Modified: Oct 29, 2026
    Published: Oct 29, 2026

    CVE-2026-67442

    FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-65984

    FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions

    Last Modified: Aug 19, 2026
    Published: Aug 18, 2026
    Items Per Page
    Frangoteam Vulnerabilities & Security CVEs | CVE-DB