Description
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
Published: 2026-07-28
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
Title ads-tec Industrial IT: Post-login open redirect in the web interface
First Time appeared Ads Tec
Ads Tec irf1000 Firmware
Ads Tec irf3000 Firmware
Weaknesses CWE-601
CPEs cpe:2.3:o:ads_tec:irf1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:ads_tec:irf3000_firmware:*:*:*:*:*:*:*:*
Vendors & Products Ads Tec
Ads Tec irf1000 Firmware
Ads Tec irf3000 Firmware
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Subscriptions

Ads Tec Irf1000 Firmware Irf3000 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-07-28T15:19:52.672Z

Reserved: 2026-06-30T06:39:09.811Z

Link: CVE-2026-14171

cve-icon Vulnrichment

Updated: 2026-07-28T15:19:17.631Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-601

    URL Redirection to Untrusted Site ('Open Redirect')