Sensitive Data Exposure in FUXA Web-Based Process Visualization Software
CVE-2026-47717

7.5HIGH

Key Information:

Vendor

Frangoteam

Status
Fuxa
Vendor
CVE Published:
12 August 2026

What is CVE-2026-47717?

The FUXA Process Visualization software is vulnerable due to improper access controls that allow guest-context requests to access sensitive project configuration data through the GET /api/project endpoint, even while secure features are enabled. This weakness can lead to unauthorized disclosure of sensitive project information, potentially affecting user security. Users are strongly advised to upgrade to version 1.3.1, which resolves this issue.

Affected Version(s)

FUXA = 1.3.0

References

https://github.com/frangoteam/FUXA/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/frangoteam/FUXA/releases/tag/v1.3.1
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.