ExploitPublished
FUXA 1.2.8 · Authentication Bypass + RCE Exploit
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until an official fix is available, restrict access to FUXA 1.2.8 instances, monitor for suspicious activity, and consider disabling or isolating affected installations to reduce exposure.
Description
FUXA 1.2.8 - Authentication Bypass + RCE Exploit
Indicators of compromise
Exploit source code
# Exploit Title: FUXA 1.2.8 - Authentication Bypass + RCE Exploit
# Date: 2026-02-25
# Exploit Author: Joshua van der Poll (https://github.com/joshuavanderpoll/)
# Software Link: https://github.com/frangoteam/FUXA/tree/v1.2.8
# Vendor Homepage: https://github.com/frangoteam/FUXA
# Version: FUXA <= 1.2.8
# Tested on: Debian GNU/Linux 12
# CVE : CVE-2025-69985
"""
FUXA ≤ 1.2.8 Authentication Bypass + RCE Exploit
CVE-2025-69985
This Python exploit targets CVE-2025-69985, an authentication bypass …References
Community reviews
Loading reviews…