CVE-2026-14952: Frauscher Sensortechnik Fds 102

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information that should not be available to unauthenticated users.

Affected products

• Frauscher Sensortechnik Fds 102: from 2.1.0, up to and including 2.13.3

Published 2026-08-20. Last modified 2026-09-03.