LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Cepheid

Cepheid

Cepheid in MedDevice Cyber coverage: 11 stories, 4 products named, 25 CVEs, and the company's own disclosures.

Follow CepheidClaim this page
Stories
11
Products named
4
Product CVEs
25
Responses on record
0
Latest story
Mar 12, 2026

Coverage

11 stories
01
Vulnerability

Cepheid tells GeneXpert Dx 6.4a sites to switch off TLS 1.0 and TLS 1.1

Cepheid's March 12, 2026 notification says GeneXpert Dx 6.4a still accepts TLS 1.0 and TLS 1.1. Sites are told to disable both in the Windows SCHANNEL registry and keep TLS 1.2 and 1.3.

CepheidMar 122 min read
02
Vulnerability

Cepheid GeneXpert Dx 6.4a needs Windows 10 update KB5068781 for 32 CVEs

Cepheid's March 12, 2026 notice says Windows 10 21H2 and 22H2 on GeneXpert Dx 6.4a lacks the November 2025 cumulative update KB5068781. The update covers 32 listed CVEs, from CVE-2025-59505 to CVE-2025-62452.

CepheidMar 122 min read
03
Vulnerability

Cepheid GeneXpert Dx, Xpress and Xpertise systems need SQL Server security updates

Cepheid's March 11, 2026 notice says the SQL Server inside GeneXpert Dx 6.4a, Xpress 6.4a and Xpertise 7.1 lacks Microsoft updates KB5065222, KB5068402 and KB5068404, with CVE-2024-21907 and CVE-2025-47997 among those in scope.

CepheidMar 113 min read
04
Vulnerability

Cepheid GeneXpert Xpertise 7.1 needs Apache OpenOffice 4.1.16

Cepheid's March 11, 2026 notice says GeneXpert Xpertise 7.1 bundles Apache OpenOffice earlier than 4.1.16, with CVE-2025-64401 through CVE-2025-64407 in scope. Upgrade to 4.1.16 or later.

CepheidMar 112 min read
05
Vulnerability

Cepheid GeneXpert Xpertise 7.1 needs .NET 8.0.17 for CVE-2025-30399

Cepheid's March 11, 2026 notice says the .NET runtime in GeneXpert Xpertise 7.1 lacks the .NET 8.0.17 update KB5061935, which fixes remote code execution flaw CVE-2025-30399.

CepheidMar 112 min read
06
Vulnerability

Cepheid GeneXpert Xpertise 7.1 needs .NET October 2025 update for CVE-2025-55248

Cepheid's March 11, 2026 notice says the .NET runtime on GeneXpert Xpertise 7.1 lacks Microsoft's October 2025 update KB5066136, which fixes CVE-2025-55248 and ships .NET SDK 9.0.111.

CepheidMar 112 min read
07
Vulnerability

Cepheid GeneXpert Xpertise 7.1 ships Microsoft Edge older than 141.0.3537.71

Cepheid's March 11, 2026 notice says GeneXpert Xpertise 7.1 runs Microsoft Edge earlier than 141.0.3537.71, exposed to CVE-2025-11458 and CVE-2025-11460. The fix is to update Edge.

CepheidMar 112 min read
08
Vulnerability

Cepheid GeneXpert Xpertise 7.1 VSTA carries privilege escalation CVE-2025-29803

Cepheid's March 11, 2026 notice says Visual Studio Tools for Applications in GeneXpert Xpertise 7.1 is older than 16.0.35907.0 / 17.0.35906.0 and exposed to CVE-2025-29803. Upgrade VSTA.

CepheidMar 112 min read
09
Vulnerability

Cepheid GeneXpert Xpress 6.4a needs Adobe Reader update from APSB25-119

Cepheid's March 11, 2026 notice says Adobe Reader on GeneXpert Xpress 6.4a predates 20.005.30838 / 25.001.20997 and is exposed to CVE-2025-64785, CVE-2025-64786, CVE-2025-64787 and CVE-2025-64899.

CepheidMar 112 min read
10
Vulnerability

Cepheid GeneXpert Xpress 6.4a ships without Windows speculative execution mitigations

Cepheid's March 11, 2026 notice says Windows on GeneXpert Xpress 6.4a lacks the recommended speculative execution mitigations for CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 and nine more CVEs. A registry change fixes it.

CepheidMar 112 min read
11
Vulnerability

Cepheid GeneXpert touchscreens on Cepheid OS 2.1 need three Windows 10 kernel updates

Cepheid's September 30, 2025 notice says GeneXpert systems with a touchscreen on Cepheid OS 2.1 carry a critical Windows 10 kernel vulnerability. Install KB5053606, KB5055518 and KB5058379 in that order.

CepheidSep 302 min read

Products in our coverage

Products and threat intel

5

Cepheid products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Xpert C. difficile/EpiC. Difficile Toxin Gene Amplification Assay86
Xpert FII & FVTest, Factor Ii G20210a Mutations, Genomic Dna Pcr60
Xpert GBS LB XC, GeneXpert Dx System, GeneXpert Infinity SystemNucleic Acid Amplification Assay System, Group B Streptococcus, Direct Specimen Test30
Xpert Hemorrhagic FeverMultiplex Nucleic Acid Detection System For Biothreat Agents70
Xpert Xpress CoV-2 plusRespiratory Specimen Nucleic Acid Sars-Cov-2 Test30

CVEs in coverage of Cepheid products

CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2019-11135 CVE-2022-0001 CVE-2024-21907 CVE-2025-11458 CVE-2025-11460 CVE-2025-29803 CVE-2025-30399 CVE-2025-47997 CVE-2025-55229 CVE-2025-55231 CVE-2025-55248 CVE-2025-59499 CVE-2025-59505 CVE-2025-60703 CVE-2025-62215 CVE-2025-62452 CVE-2025-64401 CVE-2025-64407 CVE-2025-64785 CVE-2025-64786 CVE-2025-64787 CVE-2025-64899
← All manufacturers