Directory Traversal Flaw in FUXA Software by FrangoTeam

CVE-2026-25951

What is CVE-2026-25951?

FUXA, a web-based process visualization software, is vulnerable due to inadequate sanitization in its path handling logic. This flaw allows authenticated attackers with administrative access to manipulate directory paths using nested traversal sequences. By executing these sequences, attackers can write arbitrary files to critical areas of the server's filesystem, including sensitive directories. If the server processes these malicious scripts, it may lead to remote code execution, posing significant security risks. The issue has been addressed in version 1.2.11.

References