Kaspersky Security Services researchers say the wireless handheld barcode scanners used across warehousing and e-commerce fulfilment are an unguarded entry point into warehouse networks, presenting the finding at the Security Analyst Summit 2026 in Bali on 20 October. In the standard layout several scanners talk to a base station wired to a workstation, and there is no authentication between the base station and the scanners. An attacker in Bluetooth range learns the base station's address through passive eavesdropping, then sends a payload the base station forwards to the connected PC as keystrokes — input the host treats as genuine user activity, allowing unauthorised commands and potentially remote code execution with no user interaction. Kaspersky observed the pattern across devices from multiple vendors, and its accompanying Securelist write-up notes Honeywell units affected by CVE-2026-4272. The scanner is only the doorway: the value lies in the workstation's trusted position and its connections to warehouse management systems, and Kaspersky says portable data terminals and thermal printers may offer the same route. Why it matters: the cheapest device in a distribution centre can now be an attacker's first foothold, so device verification, Bluetooth hygiene and network segmentation belong in logistics assurance.

• Source article