Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled). Version 1.3.1 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Tweet 1/3: FUXA SCADA has collected three CVEs in 2026 alone. The latest, CVE-2026-43945 (July), is unauthenticated RCE as root—even with Secure Mode enabled.
Post summary
The tweet announces that FUXA SCADA has identified a new unauthenticated remote code execution vulnerability (CVE-2026-43945) that allows root-level access, even when Secure Mode is enabled.
FUXA SCADA'ya 2026'da 3 ayrı CVE geldi. En sonuncusu (CVE-2026-43945) Temmuz ayında açıklandı: kimlik doğrulamasız, uzaktan kök erişimi. Türkiye'deki KOBİ'ler için önemli bir detay: FUXA açık kaynak ve ücretsiz. Bu yüzden gittikçe yaygınlaşıyor. Ama bedava yazılım, bedava güvenlik açığı demek değil. Sorun FUXA'da değil. Sorun, OT ortamında web uygulaması gibi davranan bir sistemin, web uygulaması gibi korunmasında. İnternet'e açık SCADA arayüzü = fabrika kapısını açık bırakmak. Ama büyük şehirlerdeki belediyelerden tutun, Anadolu'daki tesislere kadar hâlâ rastlanan bir durum. Ne yapmalı? 1. SCADA/HMI arayüzleri OT ağında kalsın, internete açılmasın 2. Açık kaynak kullanıyorsanız, güncelleme takibi sizin sorumluluğunuzda 3. Varsayılan ayarlarla kurulum = varsayılan olarak savunmasız
Post summary
Three new CVEs for FUXA SCADA were disclosed, with CVE-2026-43945 enabling unauthenticated remote root access. The post highlights the danger and recommends security best practices, but provides no exploit or patch details.
🚨*CVE* CVE-2026-43945 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote … https://www.cve.org/CVERecord?id=CVE-2026-43945 ----- Traducción: CVE-2026-43945 FUX… http://infoflow.cloud`
Post summary
The tweet shares an announcement of CVE‑2026‑43945, highlighting that unauthenticated remote attackers can gain full remote access to affected FUXA versions, and links to the official CVE record.
CVE-2026-43945 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote … https://www.cve.org/CVERecord?id=CVE-2026-43945
Post summary
CVE-2026-43945 exposes a vulnerability in FUXA versions 1.2.11 to 1.3.1 that lets unauthenticated remote attackers obtain full remote access. No PoC, patch, or active exploitation details are included.