Description
A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Frauscher Sensortechnik | FDS 102 | 2.8.0 – ≤ 2.13.3 | — |
Advisories 1
- VDE-2026-078 Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities CERT@VDE · Aug 20, 2026