Researchers found serious security flaws in two widely used commercial refrigeration control systems that could let attackers remotely tamper with cooling equipment. Claroty Team82 reported 23 vulnerabilities in Copeland XWEB Pro controllers, including bugs that can be chained to bypass protections and gain root-level remote code execution, plus multiple remote-code-execution flaws in Danfoss AK-SM 800A controllers. Both vendors have issued patches.
Why it matters: Organizations that rely on connected refrigeration, such as food, cold-chain, and industrial operators, could face spoiled inventory or operational disruption if these systems are exposed and unpatched. Owners should identify affected controllers and apply vendor fixes promptly.
2026.10.15
96% relevant
This article updates the same underlying event chain by connecting Claroty’s earlier disclosure of flaws in Copeland XWEB and Danfoss AK-SM 800A refrigeration controllers to the subsequent mass compromise of roughly 700 French supermarkets, adding exploitation impact, ANSSI warnings, and exposure data showing many devices remained internet-accessible and unpatched.
SecurityWeek News
2026.08.14
100% relevant
The article establishes a concrete new vulnerability disclosure affecting named ICS/OT refrigeration products, with patch availability and clear real-world impact.
← Back to all stories