CVE-2026-13207 | Frangoteam FUXA SCADA HMI up to 1.3.1 REST API /api/project authentication spoofing

A vulnerability was found in Frangoteam FUXA SCADA HMI up to 1.3.1. It has been classified as critical. Impacted is an unknown function of the file /api/project of the component REST API. This manipulation causes authentication bypass by spoofing.

This vulnerability is tracked as CVE-2026-13207. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More