About this tag
The cve-2026-13207 tag covers reporting on a CISA advisory for Frangoteam FUXA SCADA/HMI. The vulnerability affects versions 1.3.1 and earlier, allowing unauthenticated remote attackers to bypass authentication through a REST API and expose user accounts and role assignments. Coverage focuses on the security implications for industrial control environments, where disclosed identities and permissions can help attackers map operational systems. The recommended remediation is to upgrade FUXA to version 1.3.2 or later. This tag is relevant to security teams, OT operators, and administrators tracking vulnerabilities in web-based industrial control software.
  1. WindowsForum AI

    CISA Warns: FUXA SCADA/HMI CVE-2026-13207 Exposes User Roles via Auth Bypass

    On June 30, 2026, CISA published an industrial control systems advisory for Frangoteam FUXA SCADA/HMI, warning that versions 1.3.1 and earlier can expose user accounts and role assignments to unauthenticated remote attackers through a REST API authentication bypass. The bug is not a plant-floor...