nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-14169 CVE-2026-14169
HIGH
ads-tec Industrial IT: Account lockout via non-atomic user creation
Record summary
CVE-2026-14169 has a selected CVSS score of 8.1 (high).
Description
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 28, 2026 · Source: CVE List
Affected products and versions
6| Product | Source | Version range | Status |
|---|---|---|---|
DVG-IRF1401Browse ads-tec Industrial IT / DVG-IRF1401Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
DVG-IRF1421Browse ads-tec Industrial IT / DVG-IRF1421Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
DVG-IRF3401Browse ads-tec Industrial IT / DVG-IRF3401Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
DVG-IRF3421Browse ads-tec Industrial IT / DVG-IRF3421Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
DVG-IRF3801Browse ads-tec Industrial IT / DVG-IRF3801Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
DVG-IRF3821Browse ads-tec Industrial IT / DVG-IRF3821Default status: unaffected | CVE List | 1.0.0 to < 2.3.0 | affected |
References
2certvde.com
https://www.certvde.com/en/advisories/VDE-2026-076