24h | 7d | 30d

CVE-2026-63520

Overview

  • Microsoft
  • Microsoft SharePoint Enterprise Server 2016
11 Aug 2026
Published
19 Aug 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
1.30%
KEV

Description

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Statistics

  • 1 Post
Last activity: 14 hours ago

Bluesky

Profile picture fallback
Checkmarx Zero @checkmarxzero.bsky.social
The MS #SharePoint controls bypass issue in CVE-2026-55040 was added to CISA KEV yesterday, which isn't really surprising given that it can be chained with CVE-2026-63520 to provide an unauthenticated RCE. See: buff.ly/XO5XXeg
  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-55040

Overview

  • Microsoft
  • Microsoft SharePoint Enterprise Server 2016
14 Jul 2026
Published
19 Aug 2026
Updated
CVSS v3.1
CRITICAL (9.1)
EPSS
5.49%
KEV

Description

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
Last activity: 14 hours ago

Bluesky

Profile picture fallback
Checkmarx Zero @checkmarxzero.bsky.social
The MS #SharePoint controls bypass issue in CVE-2026-55040 was added to CISA KEV yesterday, which isn't really surprising given that it can be chained with CVE-2026-63520 to provide an unauthenticated RCE. See: buff.ly/XO5XXeg
  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-14947

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.6)
EPSS
Pending
KEV

Description

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before writing files to disk which could result in full system compromise.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14951

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.6)
EPSS
Pending
KEV

Description

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14953

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
MEDIUM (5.3)
EPSS
Pending
KEV

Description

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14946

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.6)
EPSS
Pending
KEV

Description

A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14949

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.5)
EPSS
Pending
KEV

Description

A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14948

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
Pending
KEV

Description

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-14952

Overview

  • Frauscher Sensortechnik
  • FDS 102
20 Aug 2026
Published
20 Aug 2026
Updated
CVSS v4.0
HIGH (8.7)
EPSS
Pending
KEV

Description

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information that should not be available to unauthenticated users.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

certvde.com/en/advisories/vde-

frauscher.csaf-tp.certvde.com/

  • 0
  • 0
  • 0
  • 2h ago
Showing 51 to 59 of 59 CVEs