CVE-2026-15203

The record

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Affected packages

Related vulnerabilities

• CVE-2026-8988 Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface… CWE-1191
• CVE-2026-8989 Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the… CWE-1191
• CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker… CWE-1191
• CVE-2024-36319 Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a… CWE-1191
• CVE-2025-15083 A vulnerability was determined in TOZED ZLT M30s up to 1.47. CWE-1191
• CVE-2025-36755 The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically… CWE-1191