news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-25895

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
9.5 Critical
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Risk score
76.0
Published
2026-02-09
Status
Published

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10.

Weaknesses

CWE-22CWE-306

Coverage 2

Advisories and references