Critical
9.8
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1...
CVE-2026-42922
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| frangoteam | Frangoteam | — | — |
Original description The description as published by the source.
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web talosintelligence.com
- web nvd.nist.gov
- web github.com