CVE-2026-14953

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...

CVE-2026-14953

creationtimestamp| type| source ---|---|--- 2026-08-20 08:20:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/117126859166464287...

CVE-2026-14953

Frauscher Sensortechnik's FDS102 device (R2) has improper RBAC enforcement at /api/user/fetch-all.php, allowing a low-privileged remote attacker to enumerate all users and identify privileged accounts (CVSS 5.3 MEDIUM). No patch version or in-the-wild exploitation details are provided in the docu...