CVE-2026-14947 — Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file

CVE-2026-14947

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file PUBLISHED

Description (CNA)

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before writing files to disk which could result in full system compromise.

Affected (CNA)

Vendor / product	Versions
Frauscher Sensortechnik / FDS 102	affected 2.8.0 through 2.13.3

CWE

CWE-24

References

https://www.certvde.com/en/advisories/VDE-2026-078/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.