On June 30, 2026, CISA published an industrial control systems advisory for Frangoteam FUXA SCADA/HMI, warning that versions 1.3.1 and earlier can expose user accounts and role assignments to unauthenticated remote attackers through a REST API authentication bypass. The bug is not a plant-floor...