THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-67443 — FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, s

[NVD] CVE-2026-67443 — FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, s

mednvdPublished 2026-08-18

CVE-2026-67443 CVSS: None Published: 2026-08-18T20:17:22.963

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is true, and nodeRedAuthMode is secure, a re

Indicators of compromise

CVE-2026-67443cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67443