CVE-2026-25895 Scanner
CVE-2026-25895 Scanner - Path Traversal vulnerability in FUXA
Used 2.4k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-25895
9.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
fuxa
Updated Sep 22, 2026View on NVD →
S4E scanner
CVE history: fuxa
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →