CRITICAL
9.8 CVE-2026-42922 Published 29 Oct 2026
FUXA Node-RED Authorization Bypass Leads to Remote Code Execution
Worried this affects your website?
An authorization bypass vulnerability exists in the /nodered functionality of FUXA.
- Affected version: 1.3.2-2809
- Attack vector: specially crafted unauthenticated HTTP request
- Impact: arbitrary code execution
Reference: CVE-2026-42922 on NVD
← Back to Security News