CVE-2026-14168CWE-862

ads-tec Industrial IT: Vertical privilege escalation via configuration table write

High · published July 28, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00498 · 41.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-07-28T09:07Z
EPSS history
Timeline
  • 28 JUL 09:07Z
    ads-tec Industrial IT: Vertical privilege escalation via configuration table write
    cvelistv5