CVE-2026-14168 — ads-tec Industrial IT: Vertical privilege escalation via configuration table write

CVE-2026-14168

ads-tec Industrial IT: Vertical privilege escalation via configuration table write PUBLISHED

Description (CNA)

A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

Affected (CNA)

Vendor / product	Versions
ads-tec Industrial IT / DVG-IRF1401	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF1421	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3401	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3421	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3801	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3821	affected 1.0.0 before 2.3.0

CWE

CWE-862

References

https://www.certvde.com/en/advisories/VDE-2026-076/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.