What’s Vulnerable › Vulnerabilities

CVE-2026-14953: Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-20 · updated 2026-09-03
• Weakness: CWE-425

Description

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.

Affected products

• Frauscher Sensortechnik FDS 102: from 2.11.0 through 2.13.3

References

• https://www.certvde.com/en/advisories/VDE-2026-078/

Get alerted when CVE-2026-14953 or the next vulnerability affects your stack