Description
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Frauscher Sensortechnik | FDS 102 | 2.11.0 – ≤ 2.13.3 | — |
Advisories 1
- VDE-2026-078 Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities CERT@VDE · Aug 20, 2026