CVE-2026-42922

Name of the Vulnerable Software and Affected Versions FUXA version 1.3.2-2809

Description An authorization bypass exists in the '/nodered' endpoint. An unauthenticated attacker can send a specially crafted HTTP request to this endpoint to achieve arbitrary code execution on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/nodered' endpoint to minimize the risk of exploitation.