CVE-2026-25939 Scanner
CVE-2026-25939 Scanner - Authorization Bypass vulnerability in FUXA
Used 3 times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-25939
9.3
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. This has been patched in FUXA version 1.2.11.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
fuxa
Updated Nov 12, 2026View on NVD →
S4E scanner
CVE history: fuxa
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →