PatchTheCVEfuxa vulnerabilities and fixes
Recent CVEs affecting fuxa, with upgrade or downgrade steps. 7 tracked.
fuxa has 7 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-24. Highest priority: CVE-2025-69985 (score 68/100).
- CVE-2026-25752 CRITICAL 9.1 UPGRADE FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software
- CVE-2026-25751 HIGH 7.5 UPGRADE FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software
- CVE-2025-69985 CRITICAL 9.8 UPGRADE FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE)
- CVE-2025-69983 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality
- CVE-2025-69981 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint
- CVE-2025-69971 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js
- CVE-2025-69970 CRITICAL 9.3 DOWNGRADE FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js
FAQ
How do I fix fuxa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fuxa being exploited right now?
None of the tracked fuxa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fuxa CVE should I patch first?
CVE-2025-69985 currently ranks highest (68/100): FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).