CVE-2026-14948: Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insertion of Sensitive Information into Log File via error log archives
A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs low-privileged remote access. No user interaction or administrator password is required.
What can an attacker do after obtaining the exposed information?
By extracting live plaintext session identifiers from downloadable error log archives, an attacker can hijack an active authenticated administrative session. This can lead to complete compromise of confidentiality, integrity, and availability.
How can I determine whether my environment is exposed?
Check whether you use Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 and whether error log archives are downloadable by low-privileged remote users. Exposure depends on those archives containing live plaintext session identifiers for authenticated users.