CVE-2026-14949: Frauscher Sensortechnik Fds 102

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application.

Affected products

• Frauscher Sensortechnik Fds 102: from 2.11.0, up to and including 2.13.3

Published 2026-08-20. Last modified 2026-09-03.