https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:08:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-339581 EUVD-2026-339581 https://cve.radiocsirt.org/vuln/euvd-2026-339581 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43945 <p>FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled). Version 1.3.1 fixes the issue.</p> <p>FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled). Version 1.3.1 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-43945 https://cve.radiocsirt.org/vuln/ghsa-p69w-mmfv-xrfj <p><strong>Affected:</strong> npm: @frangoteam/fuxa</p> <p>**Pre-auth** RCE in FUXA via Logic Bypass</p> <p>Summary</p> <p>A Critical vulnerability chain exists in FUXA (v.1.3.0-2706) that allows an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled).</p> <p>Details The vulnerability is a Path Confusion flaw in the authentication middleware. The server uses a substring match on the full URL (including query parameters) to exclude certain paths from authentication.</p> <p>Involved Logic:</p> <p>JavaScript: ``` const url = req.originalUrl || req.url || req.path; if (url.includes(&#39;/socket.io&#39;)) return next(); By appending ?x=/socket.io to any administrative request, the middleware is &#34;tricked&#34; into treating the request as a public WebSocket handshake, bypassing the secureEnabled and nodeRedAuthMode checks entirely. ```</p> <p>Proof of Concept</p> <p>A specially crafted request containing manipulated query parameters could bypass authentication checks on protected /nodered/* endpoints.</p> <p>In configurations where Node-RED exposed privileged or command-execution capable nodes, this could lead to remote code execution within the container context.</p> <p>Impact Access Level: Unauthenticated / Remote.</p> <p>Privilege Level: Access to Node-RED administrative endpoints. Remote code execution may be possible depending on the Node-RED configuration and installed nodes.</p> <p>CVSS 3.1 Score: High severity.</p> <p>Description: An attacker can…</p> <p><strong>Affected:</strong> npm: @frangoteam/fuxa</p> <p>**Pre-auth** RCE in FUXA via Logic Bypass</p> <p>Summary</p> <p>A Critical vulnerability chain exists in FUXA (v.1.3.0-2706) that allows an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled).</p> <p>Details The vulnerability is a Path Confusion flaw in the authentication middleware. The server uses a substring match on the full URL (including query parameters) to exclude certain paths from authentication.</p> <p>Involved Logic:</p> <p>JavaScript: ``` const url = req.originalUrl || req.url || req.path; if (url.includes(&#39;/socket.io&#39;)) return next(); By appending ?x=/socket.io to any administrative request, the middleware is &#34;tricked&#34; into treating the request as a public WebSocket handshake, bypassing the secureEnabled and nodeRedAuthMode checks entirely. ```</p> <p>Proof of Concept</p> <p>A specially crafted request containing manipulated query parameters could bypass authentication checks on protected /nodered/* endpoints.</p> <p>In configurations where Node-RED exposed privileged or command-execution capable nodes, this could lead to remote code execution within the container context.</p> <p>Impact Access Level: Unauthenticated / Remote.</p> <p>Privilege Level: Access to Node-RED administrative endpoints. Remote code execution may be possible depending on the Node-RED configuration and installed nodes.</p> <p>CVSS 3.1 Score: High severity.</p> <p>Description: An attacker can…</p> https://cve.radiocsirt.org/vuln/ghsa-p69w-mmfv-xrfj