Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-69970 FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the … https://www.cve.org/CVERecord?id=CVE-2025-69970
Post summary
The passage announces an insecure default configuration vulnerability (CVE-2025-69970) in FUXA v1.2.7, noting the commented-out 'secureEnabled' flag, with no evidence of exploits, patches, or PoC.
🔴 CVE-2025-69970 - Critical FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initia... https://www.thehackerwire.com/vulnerability/CVE-2025-69970/ https://t.co/5wxTqZpVgZ
Post summary
The post discloses CVE-2025-69970, highlighting an insecure default configuration in FUXA v1.2.7 that could lead to security risks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frangoteam | fuxa | 1.2.7 | - | - |