{"cvss":0.0,"datePublished":"2026-06-12T00:00:00Z","dateUpdated":"2026-06-12T00:00:00Z","description":"FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, \nan authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. This has been patched in FUXA version 1.2.11.","dueDate":"","id":"CVE-2026-25939","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"fuxa","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"frangoteam fuxa Missing Authorization","vendor":"frangoteam"}