CISA Advisory ICSA-26-181-02: Frangoteam FUXA SCADA/HMI Unauthenticated User Enumeration (CVE-2026-13207)

Vulnerability Overview Vulnerability Name: Frangoteam FUXA SCADA/HMI Release Date: June 30, 2026 Alert Code: ICSA-26-181-02 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems CVSS Score: 3.75 Vulnerability Type: Authentication Bypass via Spoofing Scope Affected Versions: Frangoteam FUXA SCADA/HMI <=1.3.1 (CVE-2026-13207) Critical Infrastructure Sectors: Critical Manufacturing, Energy, Water, and Wastewater Deployed Countries/Regions: Global Company Headquarters Location: Switzerland Remediation Recommended Practices: - Minimize the network exposure of all control system devices and/or systems, ensuring they are not accessible from the Internet. - Place control system networks and remote devices behind firewalls and isolate them from the business network. - When remote access is required, use more secure remote access methods, such as virtual private networks (VPNs), and recognize that VPNs may contain vulnerabilities and should be updated to the latest version. - Organizations should conduct appropriate impact analysis and risk assessments prior to deploying mitigations. - Implement recommended cybersecurity strategies to proactively defend ICS assets. - Organizations should follow established internal procedures and report findings to CISA for tracking and relevance analysis. - Users should take the following measures to protect themselves from social engineering attacks: Do not click on web links or open attachments in unsolicited email messages. Additional Information Background: This vulnerability allows an unauthenticated remote attacker to enumerate all user accounts and role assignments. Acknowledgements: This vulnerability was reported by Joshua Hayes of Cited Relevance LLC. Revision History: Initial release date was June 30, 2026. Tags Industries: Critical Manufacturing, Energy, Water, and Wastewater Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Links Related Advisories: - Mitsubishi Electric MELSOFT Update Manager SW1ND-UDM-M - XZ Utils vulnerability impacting B&R Products - Schneider Electric EcoStruxure IT Data Center Expert - Schneider Electric EasyLogic T150 and Saitel DP RTU Legal Notices and Terms of Use This product is subject to this notice and privacy and usage policies. Feedback Please share your thoughts; we have recently updated our anonymous product survey and welcome feedback. Contact CISA Central: 1-844-Say-CISA, contact@cisa.dhs.gov Footer About CISA: Budget and Performance, DHS.gov, FOIA Requests No FEAR Act: Office of Inspector General, Privacy Policy, Subscribe White House: USA.gov, Website Feedback --- The above is a summary of key vulnerability information from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

CISA Advisory ICSA-26-181-02: Frangoteam FUXA SCADA/HMI Unauthenticated User Enumeration (CVE-2026-13207)