CVE-2026-14946 — Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration…

CVE-2026-14946

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file. PUBLISHED

Description (CNA)

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.

Affected (CNA)

Vendor / product	Versions
Frauscher Sensortechnik / FDS 102	affected 2.8.0 through 2.13.3

CWE

CWE-434

References

https://www.certvde.com/en/advisories/VDE-2026-078/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.