PatchTheCVEfrangoteam vulnerabilities
Recent CVEs affecting frangoteam products. 7 tracked.
frangoteam has 7 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-24. Highest priority: CVE-2025-69985 (score 68/100).
- CVE-2026-25752 CRITICAL 9.1 UPGRADE FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software
- CVE-2026-25751 HIGH 7.5 UPGRADE FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software
- CVE-2025-69985 CRITICAL 9.8 UPGRADE FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE)
- CVE-2025-69983 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality
- CVE-2025-69981 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint
- CVE-2025-69971 CRITICAL 9.8 DOWNGRADE FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js
- CVE-2025-69970 CRITICAL 9.3 DOWNGRADE FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js
FAQ
How do I fix frangoteam vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frangoteam being exploited right now?
None of the tracked frangoteam CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frangoteam CVE should I patch first?
CVE-2025-69985 currently ranks highest (68/100): FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).