# Midnight Blue reports six unauthenticated code-execution flaws in Danfoss controllers

_Published Wednesday, November 11, 2026 at 2:31 PM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

![Midnight Blue reports six unauthenticated code-execution flaws in Danfoss controllers — Primary](https://cdn.prod.website-files.com/64a2900ed5e9bb672af9b2ed/6af2dbc514f7d4ff50318021_Blue-Steel%20Broken%20Sea%20Ice%20Mosaic.png)

Midnight Blue says it found six previously unknown vulnerabilities allowing code execution without authentication in Danfoss AK-SM800A refrigeration controllers, including firmware version 5.3.2. The researchers are coordinating disclosure with Danfoss and withholding affected endpoint details.

The findings include memory corruption in the component enforcing session controls, which Midnight Blue says undermines protection even when the strict security setting is enabled. Its demonstrated exploit targeted version 3.3.0; it says the bugs also exist in 5.3.2.

The researchers recommend restricting network exposure through VPNs, private APNs or highly restrictive IP allowlists rather than relying on patches and strict session controls alone.

## Sources

- [midnightblue.nl](https://www.midnightblue.nl/blog/multiple-rce-danfoss-aksm800a)

---
Canonical: https://techandbusiness.org/newswire/wdGL1EVvcu0w54ZQXB_FWn
Published: 2026-11-11T19:31:19.592Z
Story chronology: 2026-11-11T16:08:14.000Z
Retrieved: 2026-11-12T01:04:37.139Z
Publisher: Tech & Business (techandbusiness.org)