CVE-2026-14171 — ads-tec Industrial IT: Post-login open redirect in the web interface

CVE-2026-14171

ads-tec Industrial IT: Post-login open redirect in the web interface PUBLISHED

Description (CNA)

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.

Affected (CNA)

Vendor / product	Versions
ads-tec Industrial IT / DVG-IRF1401	affected 2.2.5 before 2.3.0
ads-tec Industrial IT / DVG-IRF1421	affected 2.2.5 before 2.3.0
ads-tec Industrial IT / DVG-IRF3401	affected 2.2.5 before 2.3.0
ads-tec Industrial IT / DVG-IRF3421	affected 2.2.5 before 2.3.0
ads-tec Industrial IT / DVG-IRF3801	affected 2.2.5 before 2.3.0
ads-tec Industrial IT / DVG-IRF3821	affected 2.2.5 before 2.3.0

CWE

CWE-601

References

https://www.certvde.com/en/advisories/VDE-2026-076/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.