15
CVEs
11
Critical
4
High
0
KEV
3
PoC
5
Unpatched C/H
66.7%
Patch Rate
0.5%
Avg EPSS
Severity Breakdown
CRITICAL
11
HIGH
4
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (5)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-69971 | FUXA v1.2.7 has hard-coded JWT credentials (EPSS 4.8%) that allow attackers to forge authentication tokens and bypass all access controls on the SCADA interface. | CRITICAL | 9.8 | 4.8% | 74 |
PoC
|
| CVE-2025-69985 | Authentication bypass in FUXA SCADA/HMI system 1.2.8 and prior leading to Remote Code Execution. Unauthenticated attackers can execute arbitrary code on industrial control HMI systems. EPSS 0.64% with PoC available. | CRITICAL | 9.8 | 0.6% | 70 |
PoC
No patch
|
| CVE-2026-25895 | FUXA SCADA has a path traversal vulnerability — ninth critical vulnerability enabling arbitrary file access on SCADA servers. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
|
| CVE-2026-13207 | Authentication bypass in FUXA SCADA/HMI versions 1.3.1 and prior lets remote unauthenticated attackers reach protected REST API endpoints by inserting dot-segment sequences (e.g. /api/./users, /api/project/../users) that the router fails to normalize before applying its authentication middleware. Successful exploitation returns sensitive user and role data without any credentials. No public exploit identified at time of analysis, though the technique is trivially reproducible and the issue is documented in a CISA ICS advisory (ICSA-26-181-02). | HIGH | 8.7 | 0.4% | 54 |
No patch
|
| CVE-2025-69983 | FUXA v1.2.7 allows remote code execution through the project import functionality by importing crafted project files containing malicious code. | CRITICAL | 9.8 | 0.3% | 49 |
No patch
|
| CVE-2026-25893 | FUXA SCADA has yet another authorization bypass — now the seventh critical FUXA vulnerability discovered, enabling unauthenticated access to industrial controls. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-25938 | FUXA SCADA has an authentication spoofing vulnerability from versions 1.2.8 through 1.2.10 — tenth critical vulnerability. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-25894 | FUXA SCADA has insecure default configuration with a known JWT secret — eighth critical vulnerability. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2025-69981 | FUXA v1.2.7 has an unrestricted file upload in the /api/upload endpoint that lacks authentication and file type validation, enabling web shell deployment on SCADA systems. | CRITICAL | 9.8 | 0.0% | 49 |
No patch
|
| CVE-2025-69970 | FUXA v1.2.7 SCADA/HMI system has insecure default configuration with security disabled by default, exposing industrial control interfaces without authentication. | CRITICAL | 9.3 | 0.1% | 47 |
No patch
|
| CVE-2026-25752 | FUXA SCADA/HMI software has an additional authorization bypass vulnerability enabling unauthenticated access to industrial control visualizations. | CRITICAL | 9.1 | 0.0% | 46 |
|
| CVE-2026-25939 | FUXA SCADA has an eleventh critical vulnerability — missing authorization from versions 1.2.8 onward. | CRITICAL | 9.1 | 0.0% | 46 |
|
| CVE-2026-72586 | Unauthenticated access to complete historical sensor data is possible in FUXA through version 1.3.3 because the DAQ_QUERY Socket.IO event handler in server/runtime/index.js omits the isSocketAdminAuthorized() check that guards every other sensitive Socket.IO event. Remote attackers can exfiltrate all sensor history without credentials even on deployments where secureEnabled=true is configured, silently undermining an operator's assumption that authentication is fully enforced. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS AV:N/AC:L/PR:N vector confirms this is trivially exploitable by any network-reachable party. | HIGH | 7.5 | 0.4% | 38 |
|
| CVE-2026-25751 | Unauthenticated attackers can retrieve sensitive InfluxDB credentials from FUXA versions through 1.2.9 due to missing authentication controls, enabling direct database access. An attacker exploiting this vulnerability can read, modify, or delete all historical process data and perform denial of service attacks by corrupting the database. FUXA 1.2.10 addresses this issue, but no patch is currently available for affected versions. | HIGH | 7.5 | 0.0% | 38 |
|
| CVE-2026-25951 | Remote code execution in FUXA prior to 1.2.11 allows authenticated administrators to bypass path traversal protections using nested directory sequences, enabling arbitrary file writes to the server filesystem. An attacker with admin privileges can inject malicious scripts into runtime directories that execute when the server reloads, achieving complete system compromise. Update to version 1.2.11 or later to remediate. | HIGH | 7.2 | 0.0% | 36 |
|