CVE-2026-25751

Name of the Vulnerable Software and Affected Versions FUXA versions through 1.2.9

Description An information disclosure issue in FUXA allows a remote, unauthenticated attacker to obtain sensitive administrative database credentials. Exploitation allows an attacker to access the full system configuration, including administrative credentials for the InfluxDB database. This access may allow an attacker to read, modify, or delete historical process data, or cause a Denial of Service by corrupting the database. This affects all deployments, including those with runtime.settings.secureEnabled set to true.

Recommendations Update to FUXA version 1.2.10 or later.