LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Fresenius Kabi

Fresenius Kabi

Fresenius Kabi in MedDevice Cyber coverage: 9 stories, 7 products named, 16 CVEs, and the company's own disclosures.

Public disclosure program
Follow Fresenius KabiClaim this page
Stories
9
Products named
7
Product CVEs
16
Responses on record
0
Latest story
Oct 26, 2026

Coverage

9 stories
01
Vulnerability

Fresenius says Fresenius Kabi infusion, transfusion and compounding products are not affected by PHP2Shell

Fresenius's October 26, 2026 PHP2Shell advisory lists Fresenius Kabi infusion, transfusion and compounding products as not affected by CVE-2026-109618 and CVE-2026-109619 because they do not rely on PHP.

Fresenius5 days ago2 min read
02
Vulnerability

Fresenius Kabi Ivenix large volume pump affected by OpenSSH flaw CVE-2024-6387

Fresenius lists Ivenix LVP software SW-0005 5.9.1 and earlier as affected by the OpenSSH sshd race condition CVE-2024-6387. Service pack 5.9.2 fixes it; exploitation needs network and physical access plus a rarely used service mode Remote Login.

Fresenius KabiDec 192 min read
03
Vulnerability

Fresenius lists Conox anesthesia monitor as affected by BLUFFS Bluetooth flaw

Fresenius lists all Conox versions (QM7000-M FW4.10, 2D FW5.10, DtC FW5.40) as affected by BLUFFS, CVE-2023-24023. Bluetooth links can likely be attacked by MitM, exposing EEG and anesthesia index data.

Fresenius KabiApr 102 min read
04
Vulnerability

Fresenius Kabi PharmaHelp allows privilege escalation through captured login data

Fresenius lists all versions of Fresenius Kabi PharmaHelp as affected by CVE-2022-45611 (CVSS 9.8), which allows escalated privileges via capture of user login information. Network segmentation and restricted access are the mitigations.

Fresenius KabiNov 242 min read
05
Vulnerability

Fresenius says Fresenius Kabi infusion pumps and Conox are not affected by Follina MSDT flaw

A July 11, 2022 Fresenius statement lists Fresenius Kabi Agilia, Exelia, Orchestra and INfusia pumps, Conox and Vigilant as not affected by Follina (CVE-2022-30190); a December 19, 2024 update added Ivenix.

FreseniusJul 112 min read
06
Vulnerability

Fresenius Kabi Agilia Connect infusion accessories expose unauthenticated endpoints and weak TLS

CISA advisory ICSMA-21-355-01 lists 13 vulnerabilities in Fresenius Kabi's Agilia Connect infusion system accessories, including unauthenticated sensitive endpoints on Agilia Link+ (CVE-2021-23233) and a denial of service scored CVSS v3 7.5 (CVE-2021-23236). Fixes include Link+ v3.0 D16, WiFi module D29 and Partner v3.3.2.

CISADec 214 min read
07
Vulnerability

Fresenius says Fresenius Kabi pumps and Conox do not use the Nucleus TCP/IP stack behind NUCLEUS:13

Fresenius's November 24, 2021 NUCLEUS:13 statement (ICSA-21-313-03) says Fresenius Kabi Agilia, Exelia, INfusia, Amika, Enfusia, Conox and Vigilant are not affected because they do not use the affected TCP/IP stack.

FreseniusNov 242 min read
08
Vulnerability

Fresenius says Fresenius Kabi pumps and Conox do not use the NicheStack TCP/IP stack hit by INFRA:HALT

Fresenius's October 12, 2021 INFRA:HALT statement (ICSA-21-217-01, 14 CVEs, CVSS 9.8) lists Fresenius Kabi pumps, Conox and Vigilant as not affected because they do not use the InterNiche TCP/IP stack.

FreseniusOct 122 min read
09
Vulnerability

Fresenius says Fresenius Kabi pumps and the 4008S do not use the Treck stack behind Ripple20

Fresenius's July 6, 2020 Ripple20 statement (ICSA-20-168-01, CVE-2020-11896 to CVE-2020-11914) lists Fresenius Kabi pumps and Conox, plus the Fresenius Medical Care 4008S and UniDataLink, as not affected.

FreseniusJul 63 min read

Products in our coverage

Products and threat intel

4

Fresenius Kabi products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Vigilant Software Suite - Vigilant Master MedInfusion Safety Management Software1816
Agilia VP Infusion SystemPump, Infusion127
Agilia SP Infusion SystemPump, Infusion110
AMICUS Separator SystemSeparator, Automated, Blood Cell, Diagnostic80

CVEs in coverage of Fresenius Kabi products

CVE-2020-35340 CVE-2021-23195 CVE-2021-23196 CVE-2021-23207 CVE-2021-23233 CVE-2021-23236 CVE-2021-31562 CVE-2021-33843 CVE-2021-33846 CVE-2021-33848 CVE-2021-41835 CVE-2021-43355 CVE-2021-44464 CVE-2022-45611 CVE-2023-24023 CVE-2024-6387
← All manufacturers