CVE Watch3 sept 2026

CVE-2026-15203

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to

CVSS

—

Sin CVSS

EPSS

0.4%

p29

KEV

—

Exploit Today

0-100

Publicado: 26 ago 2026 · Última mod.: 3 sept 2026 · CWE-1191

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-08-262026-09-04

Descripción técnica

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-89896.8 MED

19.7%

——6Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.23d CVE-2026-89886.8 MED

12.8%

——4Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.23d