CVE-2026-14169 — ads-tec Industrial IT: Account lockout via non-atomic user creation
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could re…
Published: 2026-07-28 · CVSS: 8.1 · CVSS 3.1
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7