CVE-2026-15203: Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

Severity: critical (CVSS 9.3 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-26 · updated 2026-09-03
Weakness: CWE-1191

Description

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Affected products

Danfoss iC7-Automation SP: through 2025.3.3
Danfoss iC7-Hybrid: through 2025.10.300845
Danfoss iC7-Marine: through 2025.8.19

References

https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip
https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip
https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip

Get alerted when CVE-2026-15203 or the next vulnerability affects your stack