Skip to content
Threat Feed
Subscribe

Vendor

Ads-Tec Industrial IT

3 briefs RSS
medium advisory

CVE-2026-14169: Ads-tec DVG-IRF Series Vulnerability Allows Remote Admin Lockout

A low-privileged remote attacker can exploit an incorrect behavior order vulnerability (CVE-2026-14169, CWE-696) in multiple ads-tec Industrial IT DVG-IRF series devices (versions prior to 2.3.0) by sending crafted input, leading to inconsistent account states and password overwrites, resulting in complete administrative unavailability of the device.

DVG-IRF1401 +5 vulnerability denial-of-service industrial-control-systems network-device
1t 1c
high advisory

CVE-2026-14168: ads-tec Industrial IT DVG-IRF Privilege Escalation

A high-severity missing authorization vulnerability, CVE-2026-14168, allows a low-privileged remote attacker to escalate privileges to administrator level by exploiting the insert path of the configuration table in ads-tec Industrial IT DVG-IRF series products, ultimately granting full system access.

DVG-IRF1401 +5 privilege-escalation missing-authorization industrial-control-system embedded-device
1t 1c
high advisory

CVE-2026-14167: ads-tec Industrial IT DVG-IRF Series Privilege Escalation Vulnerability

A low-privileged remote attacker can exploit CVE-2026-14167, an incorrect authorization vulnerability in multiple ads-tec Industrial IT DVG-IRF series products, to perform privileged configuration changes, including permission management, leading to privilege escalation.

DVG-IRF1401 +5 vulnerability privilege-escalation authorization-bypass ICS OT
1t 1c