Incorrect Authorization Vulnerability in Vendor Product
CVE-2026-14167

8.7HIGH

Key Information:

Vendor: Ads-tec Industrial It
Status: Dvg-irf1401; Dvg-irf1421; Dvg-irf3401; Dvg-irf3421
Vendor: CVE Published:; 28 July 2026

🔔 Create Ads-tec Industrial It Vulnerability Alert

What is CVE-2026-14167?

A low privileged remote attacker may exploit a vulnerability in Vendor Product, enabling them to execute privileged configuration changes typically restricted to administrators. This occurs due to a flaw in the authorization mechanism, allowing unauthorized actions such as permission management, which could compromise system security and integrity.

Affected Version(s)

DVG-IRF1401 1.0.0 < 2.3.0

DVG-IRF1421 1.0.0 < 2.3.0

DVG-IRF3401 1.0.0 < 2.3.0

References

https://www.certvde.com/en/advisories/VDE-2026-076/

CVSS V4

Score:

8.7

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
Jun 30, 2026

CVE-2026-14167 Data

JSON