CVE-2026-14951

8.6 highEPSS 0.2%

High (8.6). EPSS 0.2% chance of exploitation in the next 30 days.

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.

Severity

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2026-08-20
Modified: 2026-09-03
Record from: the NVD, synced 2026-10-19