A routine barcode scan could open the door to a cyberattack capable of disrupting warehouse operations and e-commerce deliveries.
Cybersecurity researchers at Kaspersky have identified a vulnerability in a widely used wireless barcode scanner model that could allow attackers to inject malicious commands into computers connected to warehouse systems.
The findings, presented at the Security Analyst Summit 2026 in Bali, highlight how seemingly ordinary devices used to track goods could become entry points for hackers targeting supply chains.
The vulnerability stems from a lack of authentication between wireless scanners and their base stations, according to the researchers. An attacker within Bluetooth range could exploit the connection to send keystrokes to a connected computer, potentially executing unauthorised commands without the user’s knowledge.
In a hypothetical attack, a hacker could identify a base station’s Bluetooth address by monitoring wireless traffic, then send a malicious payload that the connected computer interprets as legitimate keyboard input.
Once inside the computer, an attacker could potentially exploit its access to warehouse networks and critical systems, including software used to manage stock and deliveries.
Researchers say similar attack methods had been observed across devices from multiple manufacturers, raising concerns for retailers, logistics operators and other businesses that rely on connected equipment.
The warning comes as global e-commerce sales have grown rapidly, reaching more than $6 trillion after nearly doubling since 2019. Disruptions to digital warehouse systems can cause delivery delays, financial losses and reputational damage.
Kaspersky, Head of Industrial Security Services, Sergey Sidorov says the growing connectivity of modern retail and logistics meant that even a single device could create a wider security risk.
The researchers warned that other equipment, including portable data terminals and thermal printers, could also provide potential routes into warehouse infrastructure.
They recommend checking devices before connecting them to networks, disabling unused Bluetooth interfaces, strengthening authentication, separating critical systems from less secure networks and applying security updates promptly.
They recommend that businesses should also limit user access to essential functions and regularly test how attackers might move through their systems.