VULNERABILITY INTELLIGENCE
CVE-2026-14950
CVSS score9.8 CRITICAL
EPSS probability0.65%
CISA KEVNot currently listed
Published2026-08-20
Last modified2026-09-03
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.
Weakness classification
- info@cert.vde.com: CWE-613