FXC Inc. — Vulnerabilities & Security Advisories 5

FXC Inc. develops financial trading platforms used by institutional investors for executing high-frequency transactions. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and misconfigured access controls. The company has addressed five CVEs to date, with notable incidents including a 2021 RCE vulnerability that allowed unauthorized account takeovers and a 2019 XSS flaw exposing sensitive customer data. While FXC Inc. has improved security practices, their complex architecture continues to present challenges for maintaining robust defenses against evolving threats.