{"metadata": {"vulnerability": "CVE-2026-14950", "count": 20, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-07-07T12:46:59.328Z", "date_only": false, "value": "2026-07-07T12:46:59.328Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-20T05:34:25.955Z", "date_only": false, "value": "2026-07-20T05:34:25.955Z", "kind": "other", "label": "Document generated", "source": "csaf_frauschersensortechnikgmbh \u00b7 VDE-2026-078", "record": "VDE-2026-078", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-20T08:19:26.334Z", "date_only": false, "value": "2026-08-20T08:19:26.334Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-20T08:19:26.334Z", "date_only": false, "value": "2026-08-20T08:19:26.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERTVDE", "record": "CVE-2026-14950", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-20T08:20:38.086Z", "date_only": false, "value": "2026-08-20T08:20:38.086069Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/117126859166464287", "record": "CVE-2026-14950", "field": "creation_timestamp", "uuid": "f9410a47-1b61-49f7-bbe2-bb35e64d07ea", "content": "#OT #Advisory VDE-2026-078Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities\nFrauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953\nhttps://certvde.com/en/advisories/vde-2026-078/\n#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json", "url": "https://infosec.exchange/users/certvde/statuses/117126859166464287"}, {"timestamp": "2026-08-20T09:16:47Z", "date_only": false, "value": "2026-08-20T09:16:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3J24-9CJQ-WM9F", "record": "GHSA-3J24-9CJQ-WM9F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-20T09:16:47.450Z", "date_only": false, "value": "2026-08-20T09:16:47.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14950", "record": "FKIE_CVE-2026-14950", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-20T09:31:17Z", "date_only": false, "value": "2026-08-20T09:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3J24-9CJQ-WM9F", "record": "GHSA-3J24-9CJQ-WM9F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-20T09:31:17Z", "date_only": false, "value": "2026-08-20T09:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3J24-9CJQ-WM9F", "record": "GHSA-3J24-9CJQ-WM9F", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-20T10:00:00Z", "date_only": false, "value": "2026-08-20T10:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_frauschersensortechnikgmbh \u00b7 VDE-2026-078", "record": "VDE-2026-078", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-20T10:00:00Z", "date_only": false, "value": "2026-08-20T10:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_frauschersensortechnikgmbh \u00b7 VDE-2026-078", "record": "VDE-2026-078", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-20T10:00:00Z", "date_only": false, "value": "2026-08-20T10:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_frauschersensortechnikgmbh \u00b7 VDE-2026-078", "record": "VDE-2026-078", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-08-20T10:07:07.714Z", "date_only": false, "value": "2026-08-20T10:07:07.714956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtiyretrpm25", "record": "CVE-2026-14950", "field": "creation_timestamp", "uuid": "2c91d1fd-2d1e-4052-afa6-9d6f04141fe3", "content": "\ud83d\udea8 CVE-2026-14950 \u2014 CVSS 9.2 CRITICAL\n\nAn unauthenticated remote attacker in possession of a valid session identifier is able to continue using th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14950\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtiyretrpm25"}, {"timestamp": "2026-08-20T10:53:59.681Z", "date_only": false, "value": "2026-08-20T10:53:59.681793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7rdhipwwi52kt", "record": "CVE-2026-14950", "field": "creation_timestamp", "uuid": "8386dff6-524d-44fc-89bc-d5edc8f7d041", "content": "CVE-2026-14950 - Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic\nCVE ID : CVE-2026-14950\n \n Published : Aug. 20, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : An unauthenticat...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7rdhipwwi52kt"}, {"timestamp": "2026-08-20T15:03:21.438Z", "date_only": false, "value": "2026-08-20T15:03:21.438732Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14950", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-20T15:03:21.438Z", "date_only": false, "value": "2026-08-20T15:03:21.438732Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14950", "record": "FKIE_CVE-2026-14950", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-20T15:26:26.910Z", "date_only": false, "value": "2026-08-20T15:26:26.910Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-20T15:26:26.910Z", "date_only": false, "value": "2026-08-20T15:26:26.910Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14950", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-20T16:54:37.202Z", "date_only": false, "value": "2026-08-20T16:54:37.202509Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjpjytpsc2q", "record": "CVE-2026-14950", "field": "creation_timestamp", "uuid": "bfe99dd2-a1a9-4016-bd8d-347d62d48efc", "content": "Frauscher FDS102 vulnerabilities include CVE-2026-14950 (CVSS 9.8), a session flaw enabling unauthorized continued access. Update to v2.14.0.\n\n#Frauscher #FDS102 #ICS #RailwaySecurity #CVE #OTSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjpjytpsc2q"}, {"timestamp": "2026-09-03T16:57:26.583Z", "date_only": false, "value": "2026-09-03T16:57:26.583", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14950", "record": "FKIE_CVE-2026-14950", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T04:39:01.312Z", "anchors": {"origin": {"timestamp": "2026-08-20T08:19:26.334Z", "date_only": false, "value": "2026-08-20T08:19:26.334Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-20T08:19:26.334Z", "date_only": false, "value": "2026-08-20T08:19:26.334Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 6812374.978528, "hours": 1892.3263829244445, "days": 78.84693262185186, "min_seconds": 6812374.978528, "max_seconds": 6812374.978528, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-20T08:19:26.334Z", "date_only": false, "value": "2026-08-20T08:19:26.334Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14950", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T04:39:01.312Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}