CVE Feed

    Dashboard / CVE / CVE-2026-14947

    CVE-2026-14947

    A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before writing files to disk which could result in full system compromise.

    Published:Aug 20, 2026
    Last Modified:Aug 20, 2026
    EPS:Aug 20, 2026
    EPSS Score:
    CVSS Score:7.2

    Affected Products

    Vendor
    Frauscher Sensortechnik
    Product
    Fds 102

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-24 Path Traversal: '../filedir'

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-14953 (CVSS 5.3) — A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated …
    CVE-2026-14952 (CVSS 8.7) — An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup arc…
    CVE-2026-14951 (CVSS 8.6) — An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web i…
    CVE-2026-14950 (CVSS 9.2) — An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the s…
    CVE-2026-14949 (CVSS 8.5) — A low privileged remote attacker with a valid session can submit a request to the user creation functionality …
    CVE-2026-14948 (CVSS 8.7) — A low privileged remote attacker can hijack an active administrative session without needing to know the admin…
    CVE-2026-14946 (CVSS 8.6) — A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High