CVE-2026-14949

Name of the Vulnerable Software and Affected Versions Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 (affected versions not specified)

Description An issue exists where improper enforcement of role-based access control allows a low privileged remote attacker with a valid session to create new accounts with arbitrary role values, including the highest privilege level. This is achieved by submitting a request to the user creation functionality at the '/api/user/add.php' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.