cveboard RSS feed

CVE-2026-42922

cve.nowCritical

frangoteam Frangoteam

  • frangoteam Frangoteam
  • Critical
  • CVSS 9.8
  • No fixed version listed

Summary

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

From the CVE record.

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
frangoteam Frangoteam1.3.2-2809None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.8 (v3.1, scored by talos)
Weakness
CWE-285: Improper Authorization
Vendor
frangoteam, Frangoteam

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents