4057 matches found
CVE-2026-14953 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...
CVE-2026-14952
Frauscher's FDS102 web server exposes sensitive railway signaling and track layout data — including /FdsBackup.zip and files under /downloads/* — without authentication over HTTP. CVSS 8.7 (HIGH) reflects high confidentiality impact; no integrity or availability effects. No patch or workaround is...
CVE-2026-14952 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication
An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...
CVE-2026-14951 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers
An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages...
CVE-2026-14950 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic
An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web...
CVE-2026-14950
FDS102 for FAdC/FAdCi R2 has flawed session expiration logic: a stolen or leaked session identifier remains valid after its intended expiry, enabling continued unauthorized access to the FDS web interface. CVSS 9.8 Critical (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No patch or exploit detai...
CVE-2026-14948
FDS102 for FAdC/FAdCi R2 logs plaintext session identifiers into downloadable error log archives, allowing a low-privileged remote attacker to hijack admin sessions without credentials. No patch or exploitation evidence is provided; see VDE-2026-078 advisory.
CVE-2026-14947 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file
A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of...
CLEANSTART-2026-DF29491 Security fixes in falco-exporter 0.8.7-r2
Package falco-exporter version 0.8.7-r2 fixes 1 vulnerabilities: CVE-2026-46600...
CLEANSTART-2026-SJ37356 Security fixes in trino 483-r2
Package trino version 483-r2 fixes 1 vulnerabilities: CVE-2026-13006...
CLEANSTART-2026-JS92568 Security fixes in postgres-operator 1.13.0-r2
Package postgres-operator version 1.13.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-LZ84634 Security fixes in cloudprober-fips 0.14.3-r2
Package cloudprober-fips version 0.14.3-r2 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-DG03733 Security fixes in eck-operator-fips 3.4.1-r2
Package eck-operator-fips version 3.4.1-r2 fixes 1 vulnerabilities: CVE-2026-56852...
CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2
Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...
CLEANSTART-2026-EE75554 Security fixes in volume-modifier-for-k8s-fips 0.9.5-r2
Package volume-modifier-for-k8s-fips version 0.9.5-r2 fixes 1 vulnerabilities: CVE-2026-27145...
2026-08 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5121649)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
August 11, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5120695)
None None...
August 11, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 (KB5120706)
None None...
KB5120385: Windows Server 2012 R2 Security Update (August 2026)
The remote Windows host is missing security update 5120385. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...