Threat video1:00
CVE-2026-21656 Quantum HD Pre-Auth RCE: Detection & IOCs
Legacy Quantum HD refrigeration gear accepts injected code before login. Its 6 ATT&CK techniques map to 9 detection rules, 7 IOCs and a free Splunk SPL rule.
Read the full threat intel for CVE-2026-21656 Quantum HD Pre-Auth RCE: Detection & IOCs →
Chapters
- 0:00The hookCISA rates this refrigeration controller flaw 9.1.
- 0:05The storyNo login is needed.
- 0:11Attack pathClaroty reported it.
- 0:25AttributionNo threat actor is attributed.
- 0:29Indicators of compromise1 indicator to hunt: 1 URL.
- 0:35MITRE ATT&CK techniques6 ATT&CK techniques, from initial access to inhibit response function.
- 0:41Remediation4 steps now: Identify every Frick Controls Quantum HD controller running firmware 10.22.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00CISA rates this refrigeration controller flaw 9.1.
0:05No login is needed.
0:07Attackers can run code remotely.
0:12Claroty reported it. A request reaches the controller.
0:15Then it can lead to remote code execution.
0:18Information may leak, or denial of service.
0:25No threat actor is attributed. Confidence: low.
0:301 indicator to hunt: 1 URL.
0:366 ATT&CK techniques, from initial access to inhibit response function.
0:424 steps now: Identify every Frick Controls Quantum HD controller running firmware 10.22.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.