126 matches found
CVE-2026-82578
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
CVE-2026-82583
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
CVE-2026-18164
creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...
CVE-2026-64934
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-68067
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:15+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 23:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g 2026-08-12 00:01:35+00:00| seen|...
CVE-2026-67568
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2oepdilmaqi7n 2026-08-11 23:50:03+00:00| seen|...
CVE-2026-66098
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-18844
creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...
CVE-2026-18844
The CVE-2026-18844 entry concerns the Pulsetto Vagus Nerve Stimulator firmware, where several undisclosed commands are accepted over BLE without authentication or encryption and are fully processed when powered on. The connected sources offer no details on affected software versions, specific com...
CVE-2026-18844 Pulsetto Vagus Nerve Stimulator Hidden Functionality
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
CVE-2026-18844
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
CVE-2026-18844 Pulsetto Vagus Nerve Stimulator Hidden Functionality
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...
EntailLLM: Verifying LLM-Generated Vulnerability Discovery Paths with Domain Knowledge Via Logic Programming
Large language models are increasingly used to reason about software vulnerabilities, but their outputs can silently violate domain knowledge, limiting their reliability in safety-critical settings such as medical devices. Prior work either treats that output as a prediction to be scored or...
CVE-2025-4386
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal....
SAMD: A Tool for Identifying False Data Injection Scenarios in AI/ML-Enabled Medical Devices
The growing integration of artificial intelligence AI and machine learning ML in medical systems requires effective measures to address emerging security risks. One such risk is that of adversaries introducing false data through vulnerable system components during inference, causing misdiagnosis...
CVE-2025-4386
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal....
VulnCheck KEV: CVE-2024-12248
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...
EUVD-2021-14164
Malware in sbrugna...