Frauscher Sensortechnik Fds 102
8 CVEs affecting Frauscher Sensortechnik Fds 102. Latest disclosed: 2026-08-20. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14950 | Critical | 9.8 | 2026-08-20 | An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increas… |
CVE-2026-14948 | High | 8.8 | 2026-08-20 | A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext se… |
CVE-2026-14951 | High | 8.0 | 2026-08-20 | An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages. |
CVE-2026-14952 | High | 7.5 | 2026-08-20 | An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under… |
CVE-2026-14947 | High | 7.2 | 2026-08-20 | A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction dire… |
CVE-2026-14946 | High | 7.2 | 2026-08-20 | A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to i… |
CVE-2026-14949 | Medium | 6.5 | 2026-08-20 | A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new a… |
CVE-2026-14953 | Medium | 4.3 | 2026-08-20 | A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all… |