Vulnerability intelligence

CVE-2026-14950

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.6%

Riskier than 49% of all CVEs · checked 2026-10-04

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Aug 20, 2026 · latest Aug 20, 2026

Coverage timeline

Frauscher patches critical CVE-2026-14950 flaw in FDS102 system
securityonline.info · Aug 20, 2026