{"id":"EUVD-2026-57691","enisaUuid":"062065cc-fd35-3243-882b-c9d25d4a10d0","description":"FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled\u003dtrue`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.","datePublished":"Aug 12, 2026, 10:21:26 PM","dateUpdated":"Aug 14, 2026, 10:23:07 PM","baseScore":5.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c\nhttps://github.com/frangoteam/FUXA/releases/tag/v1.3.1\n","aliases":"CVE-2026-47718\nGHSA-r9g5-7q8j-958c\n","assigner":"GitHub_M","epss":0.46,"enisaIdProduct":[{"id":"3aa9430a-f1d5-3ddd-a8c7-4d1056cb5061","product":{"name":"FUXA","vendor":{"name":"frangoteam"}},"product_version":"\u003d 1.3.0-2773"}],"enisaIdVendor":[{"id":"bbe3e2c6-9ea6-34cd-9402-43feb6783970","vendor":{"name":"frangoteam"}}],"enisaIdVulnerability":[{"id":"935271b8-6119-357a-90d1-072ee69fec37","vulnerability":{"id":"GHSA-r9g5-7q8j-958c","description":"FUXA provides guest and invalid-token access to protected read APIs in secure mode","datePublished":"May 28, 2026, 8:33:11 PM","dateUpdated":"May 28, 2026, 8:33:11 PM","baseScore":0.0,"references":"https://github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c\nhttps://github.com/frangoteam/FUXA\nhttps://github.com/frangoteam/FUXA/releases/tag/v1.3.1\n","enisa_id":"EUVD-2026-57691\n","aliases":"GHSA-r9g5-7q8j-958c\nCVE-2026-47718\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:56:29 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f517fa08-3ff5-3de8-97e8-47fb9734eb45","vulnerability":{"id":"CVE-2026-47718","description":"FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled\u003dtrue`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.","datePublished":"Aug 12, 2026, 10:21:26 PM","dateUpdated":"Aug 14, 2026, 10:23:07 PM","status":"PUBLISHED","baseScore":5.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/frangoteam/FUXA/security/advisories/GHSA-r9g5-7q8j-958c\nhttps://github.com/frangoteam/FUXA/releases/tag/v1.3.1\n","enisa_id":"EUVD-2026-57691\n","assigner":"GitHub_M","epss":0.46,"dataProcessed":"Oct 30, 2026, 7:18:17 AM","vulnerabilityProduct":[{"id":"88e714f3-b93d-3660-88d2-5a27b1bc2b48","product":{"name":"FUXA","vendor":{"name":"frangoteam"}},"product_version":"\u003d 1.3.0-2773"}],"vulnerabilityVendor":[{"id":"bccbc71b-9095-3ae0-b567-addb9f303bb9","vendor":{"name":"frangoteam"}}]}}],"enisaIdAdvisory":[]}