Dashboard / CVE-2026-40063

CVE-2026-40063

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 71/100
Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
frangoteam Frangoteam 1.3.2-2809
frangoteam Frangoteam 1.3.2-2809
frangoteam Frangoteam 1.3.2-2809

References & Advisories (1)

Bug Bounty Relevance

71 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.29%
Raw Score 0.002880
Percentile 21.3%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links