Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-14953

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Frauscher Sensortechnik FDS 102

Default version status: unaffected

  • 2.11.0 to ≤ 2.13.3affected

References