Vulnerabilities in frangoteam
13 resultsVexday analysis
A Frangoteam acumula 11 vulnerabilidades, com 7 em nível crítico, mas nenhuma está sob exploração ativa conhecida até o momento. A fraqueza dominante (CWE-306 - autenticação ausente ou insuficiente) é estrutural e preocupante; a publicação de 3 vulnerabilidades nos últimos 90 dias sugere descobertas recentes que demandam atenção imediata à política de autenticação do fornecedor.
CVE-2026-25939CRITICALFUXA Unauthenticated Remote Arbitrary Scheduler WriteEPSS 11.4%CVE-2026-25895CRITICALFUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload APIEPSS 3.9%CVE-2026-25951HIGHFUXA has a Path Traversal Sanitization BypassEPSS 1.2%CVE-2026-25938CRITICALFUXA Unauthenticated Remote Code Execution in Node-RED IntegrationEPSS 1.0%CVE-2026-43945HIGHFUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration InjectionEPSS 0.9%CVE-2026-25894CRITICALFUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default ConfigurationEPSS 0.8%CVE-2026-25893CRITICALFUXA Unauthenticated Remote Code Execution via Admin JWT MintingEPSS 0.7%CVE-2026-43947HIGHFUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization BypassEPSS 0.7%CVE-2026-43946HIGHFUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValueEPSS 0.5%CVE-2026-25752CRITICALFUXA Unauthenticated Remote Arbitrary Device Tag WriteEPSS 0.5%CVE-2026-13207HIGHFrangoteam FUXA SCADA/HMI Authentication Bypass by SpoofingEPSS 0.4%CVE-2026-25751CRITICALFUXA Unauthenticated Exposure of Plaintext Database CredentialsEPSS 0.3%CVE-2026-72586HIGHfrangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event HandlerEPSS —