CVE-2026-14171mediumCWE-601

CVE-2026-14171: falha de média gravidade em ads-tec Industrial IT DVG-IRF1401

ads-tec Industrial IT: Post-login open redirect in the web interface

Publicada em

Seguir esta CVE+ Monitorar DVG-IRF1401+ Monitorar DVG-IRF1421

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.3%
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
ads-tec Industrial IT · DVG-IRF1401ads-tec Industrial IT · DVG-IRF1421ads-tec Industrial IT · DVG-IRF3401ads-tec Industrial IT · DVG-IRF3421ads-tec Industrial IT · DVG-IRF3801ads-tec Industrial IT · DVG-IRF3821
CVEs relacionadas — ads-tec Industrial IT DVG-IRF1401

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14169HIGHads-tec Industrial IT: Account lockout via non-atomic user creationEPSS 0.5%CVE-2026-14168HIGHads-tec Industrial IT: Vertical privilege escalation via configuration table writeEPSS 0.5%CVE-2026-14167HIGHads-tec Industrial IT: Privilege escalation during configuration importEPSS 0.5%