---
cve: "CVE-2026-14948"
severity: "HIGH"
cvss: 8.7
epss: "39%"
vendor: "Frauscher Sensortechnik"
kev: false
exploited: false
published: "2026-08-20 09:16:47"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-08-31T20:02:10+02:00"
---

# CVE-2026-14948

> 8.7 HIGH

## Beschreibung

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |

## Referenzen

- <https://www.certvde.com/en/advisories/VDE-2026-078/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-14948) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_