← Database

CVE-2026-43946

N/A CVSS: N/A Published: 2026-07-21 Modified: 2026-07-23

Description

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue.

Affected Platforms

Unknown

Weakness Type

CWE-863

References