Is CVE-2026-14952 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14952?

CVE-2026-14952 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-14952

Description

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information that should not be available to unauthenticated users.