VulnSocial

CVE-2023-33831General(frangoteam / fuxa)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.

frangoteam CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-77

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fuxa

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
frangoteam
Products
fuxa

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-05: 106-05
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Loginsoft Threat Intel@Loginsoft_Intel
    General

    Cytellite recent detection targeting CVE-2023-33831 — dataforest GmbH Visit -- https://cti.loginsoft.com/ip/94.26.106.29 #Loginsoft #Cytellite #Cybersecurity #CVE202333831 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/XfT8kvpJrn

    Post summary

    The tweet announces that Cytellite detected activity related to CVE-2023-33831, but provides no proof‑of‑concept, exploitation details, patch information, or technical specifics.

    0000032
    22 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfrangoteamfuxa1.1.13--

Explore more

Back to dashboardfrangoteam CVEsfuxa vulnerabilities