{"id":"CVE-2026-43946","revision":"6b0ab48666284060ac9a5cd94fa29d1a","records":[{"revision":"6b0ab48666284060ac9a5cd94fa29d1a","observedAt":"2026-10-25T10:17:21.823+00:00","statement":{"source":"nvd","id":"CVE-2026-43946","aliases":[],"title":"FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Vers…","description":"FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue.","state":0,"publishedAt":"2026-07-21T22:17:01.41+00:00","modifiedAt":"2026-10-24T19:10:00.127+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · security-advisories@github.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":7.7,"severity":"HIGH"}],"references":["https://github.com/frangoteam/FUXA/commit/78534da61a91613712b44bb63c8d7da8c5df5ca4","https://github.com/frangoteam/FUXA/pull/2260","https://github.com/frangoteam/FUXA/releases/tag/v1.3.1","https://github.com/frangoteam/FUXA/security/advisories/GHSA-fwcm-rqvw-j3p7"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-43946","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-863"],"productCriteria":[],"sourceDates":{"published":"2026-07-21T22:17:01.410","lastModified":"2026-10-24T19:10:00.127"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-43946","identifiers":["CVE-2026-43946"]},"retained":false,"historicalAffected":[]}],"coverage":[]}