Researchers continue to find serious vulnerabilities in internet connected refrigerators

VulnCheck disclosed 14 vulnerabilities in Dixell/Copeland XWEB EVO refrigeration supervision systems, several rated high severity, with at least two actively exploited in the wild. The core problem is that operational technology (OT) devices like commercial refrigeration controllers are being exposed directly to the internet without adequate hardening, segmentation, or timely patching. These devices were not designed with modern threat models in mind, yet they are increasingly networked and reachable by attackers. The same system was previously implicated in a supermarket refrigeration hack in France, meaning the risk was known and the lesson was not broadly applied. This matters because exploitation can disrupt critical cold-chain infrastructure — affecting food safety, pharmaceuticals, or industrial processes — and serve as a pivot point into broader facility networks.