Kaspersky identifies barcode scanner vulnerability in logistics networks

Kaspersky Security Services researchers have discovered a new cyberattack vector that exploits vulnerabilities in widely used barcode scanner models. The findings, presented at the Security Analyst Summit 2026 in Bali, highlight significant risks to e-commerce supply chains and warehouse operational technology (OT) networks.

The vulnerability stems from a lack of authentication between handheld scanners and their base stations. In a typical configuration, these scanners communicate wirelessly with a base station, which is then connected to a workstation or corporate system. Researchers found that an attacker within wireless range could intercept Bluetooth traffic to identify a base station's address and subsequently send malicious keystroke sequences to the connected system.

This method allows for remote code execution without requiring user interaction, as the connected computer perceives the malicious inputs as legitimate keystrokes from a user. The vulnerability has been observed in devices from multiple manufacturers, posing a threat to warehouses, retail sectors, and other industries that rely on these digital ecosystems.