Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/20 9:16 a.m.•21 views

CVE-2026-14952

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

8.7CVSS0.00538EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/20 8:19 a.m.•23 views

EUVD-2026-63223

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

8.7CVSS5.4AI score0.00538EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/20 8:19 a.m.•59 views

CVE-2026-14952

Frauscher's FDS102 web server exposes sensitive railway signaling and track layout data — including /FdsBackup.zip and files under /downloads/* — without authentication over HTTP. CVSS 8.7 (HIGH) reflects high confidentiality impact; no integrity or availability effects. No patch or workaround is...

8.7CVSS5.4AI score0.00538EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/20 8:19 a.m.•51 views

CVE-2026-14952 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

8.7CVSS0.00538EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-14952: Missing Authentication for Critical Function

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

8.7CVSS5.8AI score0.00538EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•25 views

PT-2026-78910

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

8.7CVSS5.4AI score0.00538EPSS
SaveExploits0References2
Rows per page
Query Builder