A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-33831 · ADVISORY
• frangoteam/FUXA · PACKAGE
• rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831 · WEB
• youtu.be/Xxa6yRB2Fpw · WEB

Weitere Schwachstellen in fuxa

• CVE-2025-69985KRITISCH 9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the…
• CVE-2026-25951HOCH 7.2FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic al…
• CVE-2026-25939KRITISCH 9.1FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulner…
• CVE-2026-25938KRITISCH 9.8FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability …
• CVE-2026-25895KRITISCH 9.8FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, …