its security advisory at the time. (new window)

www.danfoss.com • October 15, 2026

Post-Authentication Vulnerabilities - OS Command Injection RCE and Nginx Configuration Injection in Danfoss AK-SM8xxA Series,

Advisory ID: DSA-2025-08-01

CVE numbers and CVSS scores CVE-2025-41451 Base Score: 8.7 (HIGH) CVE-2025-41452 Base Score: 6.8 (MEDIUM)

CVE-2025-41451 Base Score: 8.7 (HIGH)

CVE-2025-41452 Base Score: 6.8 (MEDIUM)

Post-Authentication Vulnerabilities - OS Command Injection RCE and Nginx Configuration Injection in Danfoss AK-SM8xxA Series.These vulnerabilities should be considered serious and could lead to the compromise of the system. Install the latest patch with number 4.3.1 to remediate these vulnerabilities..

Affected products and services

Danfoss AK-SM 8xxA Series prior to version 4.3.1

Vulnerability description

CVE-2025-41451 - Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system. Problem Type: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2025-41452 - Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions.

Problem Type: CWE-15 : CWE-15: External Control of System or Configuration Setting

Install the latest software version through AK-SM 8xxA Series | Danfoss .

Credits (if opted in)

Tomer Goldschmidt (Claroty Team82)

01 August, 2025: Publication

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattack Heats French Supermarket Refrigerators to 50°C, Causing Food Loss On October 11-12, 2026, a cyberattack targeted the refrigeration systems of hundreds of French supermarkets, including Intermarché, Coopérative U, and Carrefour. Attackers exploited vulnerabilities in Danfoss controllers, raising temperatures to 50°C (122°F) and triggering extensive food spoilage and some fires. The attack affected over 300 Intermarché and Netto stores, with significant losses estimated in the millions of euros. The Paris Prosecutor's Office has launched an investigation into the incident, while France's National Cybersecurity Agency (ANSSI) is assessing the vulnerabilities exploited. The compromised systems primarily included outdated models that no longer received security updates, highlighting the risks associated with legacy technology. No group has claimed responsibility for the attack, and investigations are ongoing. 45 sources 71

Extracted Entities

its security advisory at the time. (new window)

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)

Vulnerabilities (2)