CVE-2026-14946: Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.
Published Aug 20, 2026
·Updated
A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.
Affected Software
1 affected component
Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2
Event History
Aug 20, 2026
CVE Published
via MITRE·08:18 AM
Data Sourced
via MITRE·08:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must already have high-privileged remote access in order to upload the malicious file.
2
How is arbitrary code execution obtained?
An attacker uploads a file with a .php extension and then directly requests it from /uploads/<filename>.php. Improper file type validation allows the uploaded PHP file to execute.
3
What is the likely impact if exploitation succeeds?
Successful exploitation can provide arbitrary code execution and may result in full system compromise.