Threats tagged 'ghsa-fcm7-v7r7-pvhr'

CVE-2026-72586 is a high-severity vulnerability in frangoteam FUXA up to version 1.3.3 where the DAQ_QUERY Socket.IO event handler lacks authentication checks. This allows unauthenticated remote attackers to query all historical sensor data. Other sensitive Socket.IO events enforce token-based authorization when secureEnabled=true, but DAQ_QUERY does not, leading to unauthorized data access.