VulnSocial

CVE-2026-15203

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-12: 210-12
Referenced assets1 URL
Full discourse2 posts
  • ☠ Bluetouff@bluetouff

    Rien ne dit que ce soit directement lié à ce stade mais Danfoss a effectivement publié le 18 septembre 2026 un avis de sécurité concernant une vulnérabilité critique, CVE-2026-15203, affectant certains de ses systèmes de contrôle industriels. Sa sévérité est évaluée à 9,3/10 par le fabricant. Cette faille peut permettre des accès non autorisés à des données internes et la modification de logiciels embarqués. https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2026-08-01/

    4176562020.7K
    42.6K followersView on X
  • Djohn-Djohn@Ezekiel_26

    @dg1sek @schelcher @CooperativeU CVE-2026-15203

    0000013
    110 followersView on X

Explore more

Back to dashboard