Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-14167

ads-tec Industrial IT: Privilege escalation during configuration import

A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Ads-tec Industrial It Ads Tec
Products
Dvg-irf1401 Dvg-irf1421 Dvg-irf3401 and 5 more
CVE-2026-14168

ads-tec Industrial IT: Vertical privilege escalation via configuration table write

A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ads-tec Industrial It Ads Tec
Products
Dvg-irf1401 Dvg-irf1421 Dvg-irf3401 and 5 more
CVE-2026-14169

ads-tec Industrial IT: Account lockout via non-atomic user creation

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Ads-tec Industrial It Ads Tec
Products
Dvg-irf1401 Dvg-irf1421 Dvg-irf3401 and 5 more
CVE-2026-14171

ads-tec Industrial IT: Post-login open redirect in the web interface

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ads-tec Industrial It Ads Tec
Products
Dvg-irf1401 Dvg-irf1421 Dvg-irf3401 and 5 more