{"id":"CVE-2026-15203","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-15203","summary":"Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values,…","details":"Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms","published":"2026-08-26T06:16:25.130","modified":"2026-08-26T15:16:43.550","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip"},{"type":"WEB","url":"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip"},{"type":"WEB","url":"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-26T15:16:43.550"}}