CVE-2026-47718: Frangoteam Fuxa

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue.

Affected products

• Frangoteam Fuxa: version 1.3.0-2773 only

Published 2026-08-12. Last modified 2026-09-16.