CVE•Published 2026-08-26•Modified 2026-09-03•0 articles on news•4 live references•NVD data

CVE-2026-15203

Vulnerability data via NVD (ingested)

CVSS v3.1
—
EPSS percentile
29
Exploit Prediction Scoring System · top 71% of all CVEs
Description

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Timeline
Published 2026-08-26
Modified 2026-09-03

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (1)

We haven't classified any articles referencing CVE-2026-15203 yet. The external references above still apply.