Authorization Bypass in Configuration Table of Affected Product from Vendor
CVE-2026-14168

8.8HIGH

Key Information:

Vendor

Ads-tec Industrial It

Status
Dvg-irf1401
Dvg-irf1421
Dvg-irf3401
Dvg-irf3421
Vendor
CVE Published:
28 July 2026

What is CVE-2026-14168?

A remote attacker with low privileges can exploit a lack of proper authorization mechanisms in the configuration table's insert path. This vulnerability allows attackers to elevate their privileges, potentially resulting in complete system access and control over sensitive configurations.

Affected Version(s)

DVG-IRF1401 1.0.0 < 2.3.0

DVG-IRF1421 1.0.0 < 2.3.0

DVG-IRF3401 1.0.0 < 2.3.0

References

https://www.certvde.com/en/advisories/VDE-2026-076/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.