Frangoteam FUXA SCADA/HMI

This advisory details a critical vulnerability in Frangoteam FUXA SCADA/HMI software versions up to 1.3.1, allowing unauthenticated remote attackers to enumerate user accounts and role assignments. The vulnerability stems from a flaw in the REST API’s path normalization process, enabling attackers to bypass authenticat…