CVE-2026-40063: Infoleak
Published Oct 29, 2026
·Updated
A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Affected Software
1 affected component
FUXA FUXA=1.3.2-2809
Event History
Oct 29, 2026
CVE Published
via MITRE·02:59 AM
Data Sourced
via MITRE·02:59 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Any network-reachable attacker can trigger it without authentication by sending a specially crafted HTTP request to the affected functionality.
2
What is the impact of successful exploitation?
Successful exploitation can disclose information. The available data does not identify the specific information that may be exposed.
3
Which version is identified as affected?
The provided information identifies FUXA version 1.3.2-2809 as affected.