Threats Tagged 'cve-2026-14947'

CVE-2026-14947 is a path traversal vulnerability in Frauscher Sensortechnik FDS 102 that allows a high-privileged remote attacker to upload a malicious ZIP archive containing directory traversal sequences (e.g., ../). This enables the attacker to escape the intended extraction directory and write files to arbitrary locations on the server. Improper validation of archive entry paths before writing files to disk can lead to arbitrary code execution and potentially full system compromise. The vulnerability affects versions from 2.8.0 up to and including 2.13.3. The CVSS 4.0 score is 8.6, indicating high severity. No patch or remediation details are provided in the input data.

CVE-2026-14946 is a high-severity vulnerability in Frauscher Sensortechnik FDS 102 that allows a high privileged remote attacker to upload a .php file due to improper file type validation. This uploaded file can then be accessed directly to execute arbitrary code, potentially leading to full system compromise. The affected versions include 2.8.0 through 2.13.3. No patch or remediation information is currently provided.