CVE-2026-47720

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a crafted sids tag identifier through GET /api/daq or the Socket.IO DAQ_QUERY event so TDengine interprets the backslash and quote sequence as SQL syntax. The injected query can return every row from fuxa.meters, exposing historical PLC tag values, device identifiers, and device names even when FUXA authentication is enabled. This issue is fixed in version 1.3.2.

• CWE-89

• https://github.com/frangoteam/FUXA/commit/b78f6159d02a56ce5ff48207feb936afb3534fc8
• https://github.com/frangoteam/FUXA/pull/2343
• https://github.com/frangoteam/FUXA/releases/tag/v1.3.2
• https://github.com/frangoteam/FUXA/security/advisories/GHSA-h9fj-c2qr-76g2

Published

Aug 18, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47715Bugsink is a self-hosted error tracking tool. Prior to 2.2.0…3.1
• CVE-2026-47716Bugsink is a self-hosted error tracking tool. Prior to 2.2.0…3.1
• CVE-2026-47717FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…7.5
• CVE-2026-47718FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…5.5
• CVE-2026-47719FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…8.2
• CVE-2026-4772Improper neutralization of input during web page generation …5.4
• CVE-2026-47721FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…6.3
• CVE-2026-47722nebula-mesh is a self-hosted control plane for Slack Nebula …8.7
• CVE-2026-47723nebula-mesh is a self-hosted control plane for Slack Nebula …7.1
• CVE-2026-47724nebula-mesh is a self-hosted control plane for Slack Nebula …9.9
• CVE-2026-47725nebula-mesh is a self-hosted control plane for Slack Nebula …6.9
• CVE-2026-47726nebula-mesh is a self-hosted control plane for Slack Nebula …7.1