CVE-2026-25939

Critical9.1Published on February 9, 2026

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. This has been patched in FUXA version 1.2.11.

Early warning: exploitation observed

Exploitation observed since Jun 12, 2026
Not yet in the official CISA catalogue
First attack observed 122 days after disclosure
Confirmed by sensors, not only by reports

Source: VulnCheck KEV · Aug 18, 2026 Jul 10, 2026 Jun 15, 2026 Jun 12, 2026

CVSS score9.1 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness type (CWE)CWE-862

Vendorsfrangoteam

Affected products

Vendors	Product	Versions
frangoteam	fuxa	< 1.2.11

Vulnerabilities

MLflow and FUXA Under Attack: Critical AI and Industrial Automation Flaws Exploited

Critical flaws in MLflow and FUXA are being exploited, posing risks to AI and industrial automation. Learn about CVEs and mitigation strategies.

Aug 18, 202621:095 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Early warning: exploitation observed

Affected products

Related articles

MLflow and FUXA Under Attack: Critical AI and Industrial Automation Flaws Exploited