Approved changes feed: RSS · Atom

cpe:2.3:a:realtimelogic:fuguhub:8.1:*:*:*:*:windows:*:*

part: a version: 8.1 update: *

VendorRealtimelogic (cc8ae952-f3c1-533d-afb4-7c7f3a20874b)
ProductFuguhub (ea44d795-f38c-5619-8172-8987b787041d)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-65790 vulnerable 2026-06-08 07:39:20.976409 Details available
A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline <script> element, the browser executes the attacker-controlled JavaScript.
Published: 2025-12-22T00:00:00.000Z
Updated: 2025-12-22T20:19:21.665Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.