CVE-2026-14950

9.2 criticalEPSS 0.6%

Critical (9.2). EPSS 0.6% chance of exploitation in the next 30 days.

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.

Severity

CVSS 4.0

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2026-08-20
Modified: 2026-09-03
Record from: the NVD, synced 2026-10-19

References

https://www.certvde.com/en/advisories/VDE-2026-078/

Check your stack JSON