CVE-2026-42949 | Frangoteam Fuxa 1.3.2-2809 HTTP /api/runscript runScript authorization

October 29, 2026 Yanac

A vulnerability was found in Frangoteam Fuxa 1.3.2-2809 and classified as critical. This issue affects the function runScript of the file /api/runscript of the component HTTP Handler. Executing a manipulation can lead to authorization bypass.

This vulnerability appears as CVE-2026-42949. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More