CVE-2026-47718

EUVD-2026-57691
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.17%
Common Weakness Enumeration
References
https://github.com/frangoteam/FUXA/releases/tag/v1.3.1
https://github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c