CVE-2026-14950 Security feature bypass in FDS 102
An attacker with a valid session ID can maintain unauthorized access to the FDS web interface after the session should have expired.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-14950?
CVE-2026-14950 is a critical vulnerability in Frauscher Sensortechnik FDS 102, published on 20 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.
Weakness: CWE-613
Which versions are affected by CVE-2026-14950?
How do I fix CVE-2026-14950?
No fix has been published for CVE-2026-14950 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-14950 being exploited?
There is no known exploitation of CVE-2026-14950 in the wild and no public exploit code.
Sources
Also known as GHSA-3j24-9cjq-wm9f.