Medium
5.6
A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version...
CVE-2026-42949
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| frangoteam | Frangoteam | — | — |
Original description The description as published by the source.
A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web talosintelligence.com
- web nvd.nist.gov
- web github.com