CVE Vulnerabilities

CVE-2025-69970

Published: Feb 03, 2026 | Modified: Feb 03, 2026

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-69970
CWE	https://cwe.mitre.org/data/definitions/.html

FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The secureEnabled flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API endpoints, modify projects, and control industrial equipment immediately after installation.

References

https://github.com/frangoteam/FUXA/blob/master/server/settings.default.js

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.