Improper Post-Login Redirect Vulnerability in Web UI of Vendor Product
CVE-2026-14171

6.1MEDIUM

Key Information:

Vendor: Ads-tec Industrial It
Status: Dvg-irf1401; Dvg-irf1421; Dvg-irf3401; Dvg-irf3421
Vendor: CVE Published:; 28 July 2026

🔔 Create Ads-tec Industrial It Vulnerability Alert

What is CVE-2026-14171?

An unauthenticated remote attacker can exploit a flaw in the post-login redirect mechanism of the web interface. This improper validation can mislead users into visiting a malicious website, potentially compromising user data and functionality. Organizations relying on this product should implement security measures to mitigate this risk.

Affected Version(s)

DVG-IRF1401 2.2.5 < 2.3.0

DVG-IRF1421 2.2.5 < 2.3.0

DVG-IRF3401 2.2.5 < 2.3.0

References

https://www.certvde.com/en/advisories/VDE-2026-076/

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
Jun 30, 2026

CVE-2026-14171 Data

JSON