Vulnerabilities in Frangoteam
26 resultsCVE-2026-47718MEDIUMFUXA provides guest and invalid-token access to protected read APIs in secure modeEPSS 0.5%CVE-2026-47721MEDIUMFUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actionsEPSS 0.4%CVE-2026-67442LOWFUXA Business Logic Flaw: Role Deletion Without User Assignment CleanupEPSS 0.3%CVE-2026-25751CRITICALFUXA Unauthenticated Exposure of Plaintext Database CredentialsEPSS 0.3%CVE-2026-40063MEDIUMA information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially craftEPSS 0.3%CVE-2026-42949MEDIUMA authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP rEPSS 0.2%