Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/*, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information that should not be available to unauthenticated users.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-14952 Unauthenticated Sensitive File Retrieval from FDS Web Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14952
Post summary
The text simply announces CVE-2026-14952 as an unauthenticated file‑retrieval vulnerability in the FDS Web Server, without providing additional technical details or actionable information.
CVE-2026-14952 An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downl… https://www.cve.org/CVERecord?id=CVE-2026-14952
Post summary
The CVE-2026-14952 disclosure notes that an unauthenticated attacker can access sensitive files on the FDS Web server, but provides no PoC, exploit, patch, or evidence of active exploitation.