Security Flaw in FUXA Process Visualization Software by Frango Team

CVE-2026-65984

What is CVE-2026-65984?

A security vulnerability in FUXA, a web-based Process Visualization software, allows attackers to maintain unauthorized access after account modifications. The flaw resides in the handling of user data during specific API calls. Attackers can exploit this by utilizing previously issued privileged tokens or refresh cookies, enabling them to generate unauthorized JWTs. This occurs even after user deletions or role changes, leading to risks such as unauthorized user management, project manipulation, and potential backdoor account creation. The issue has been resolved in version 1.3.3.

References