A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-33831 · ADVISORY
• frangoteam/FUXA · PACKAGE
• rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831 · WEB
• youtu.be/Xxa6yRB2Fpw · WEB

Más vulnerabilidades de fuxa

• CVE-2025-69985CRÍTICO 9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the…
• CVE-2026-25951ALTO 7.2FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path sanitization logic al…
• CVE-2026-25939CRÍTICO 9.1FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulner…
• CVE-2026-25938CRÍTICO 9.8FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability …
• CVE-2026-25895CRÍTICO 9.8FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows an unauthenticated, …