CVE-2026-42922
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s)…
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A critical authorization bypass vulnerability exists in FUXA's /nodered functionality, allowing an attacker to make an unauthenticated HTTP request and potentially execute arbitrary code.
- Affected
- {'products': ['FUXA'], 'packages': [], 'versions': ['1.3.2-2809']}
- Fix
- Check the linked advisory for a fix, as none is provided in the record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Last activity 29 Oct 2026. Patch Forecast updates every hour.