CVE-2026-14950: CWE-613 Insufficient Session Expiration in Frauscher Sensortechnik FDS 102

This vulnerability (CWE-613: Insufficient Session Expiration) affects Frauscher Sensortechnik FDS 102 versions from 2.1.0 through 2.13.3 inclusive. An attacker who obtains a valid session identifier can maintain access beyond the intended session expiration period, potentially enabling unauthorized access to the web interface without authentication. The CVSS 4.0 base score is 9.2 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

The vulnerability allows unauthorized continued access to the FDS 102 web interface if an attacker possesses a valid session token that should have expired. This increases the risk of unauthorized control or information disclosure due to session reuse after expiration, especially if session tokens are stolen, leaked, or shared.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider additional compensating controls such as monitoring for suspicious session activity and ensuring secure handling of session tokens.