VYPR

FDS Web server

by FDS

CVEs (1)

  • CVE-2026-14952HigAug 20, 2026
    risk 0.49cvss 7.5epss

    An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track…