This vulnerability (CVE-2026-14951) allows a remote attacker with low privileges to cause authenticated users of the FDS Web interface to execute unintended actions by leveraging malicious web pages. It is classified under CWE-352 (Cross-Site Request Forgery). The CVSS v3.1 score is 8.0, indicating high impact with network attack vector, low attack complexity, requiring privileges and user interaction, and resulting in high confidentiality, integrity, and availability impacts. No affected versions or patch information are provided, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized actions performed on behalf of authenticated users, potentially compromising confidentiality, integrity, and availability of the FDS Web interface. The attacker can induce these actions remotely without needing high privileges themselves but requires the victim to be authenticated and interact with malicious content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious of interacting with untrusted web content while authenticated to the FDS Web interface. No official patch or workaround information is provided in the current data.