CVE-2026-14949 — Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Incorrect Authorization due to improper enforcement of role-based access control
A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbit…
Published: 2026-08-20 · CVSS: 8.5 · CVSS 4.0
A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7