Back to the CVE list

CVE-2026-47720Suited to automated attack · CISA

FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString

CVSS score

5.3

EPSS probability

%0.6

Risk score

0.0

Published

2 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

7.5

CVE-2026-47717FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

Vendorfrangoteam ProductFUXA

Patch status unknown Public Exploits:1EPSS %12 mo ago

9.2

CVE-2026-67443FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

Vendorfrangoteam ProductFUXA

Patch status unknownEPSS %12 mo ago

8.2

CVE-2026-47719FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading

Vendorfrangoteam ProductFUXA

Patch status unknownEPSS %12 mo ago

7.5

CVE-2026-72586frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler

Vendorfrangoteam ProductFUXA

Patch status unknownEPSS %12 mo ago

7.5

CVE-2026-65984FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions

Vendorfrangoteam ProductFUXA

Patch status unknownEPSS %12 mo ago

6.9

CVE-2026-67440FUXA: Unauthenticated Socket.IO read events

Vendorfrangoteam ProductFUXA

Patch status unknownEPSS %12 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-47720"