LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Intuitive // Products

da Vinci SP Surgical System

System, Surgical, Computer Controlled Instrument. Attributes come from Intuitive's own public documentation for this product.

Attributes

Signals
Closed-loop control Therapy delivery Cloud connectivity Remote access Wired network Field-updatable firmware
Properties (MITRE EMB3D)
PID-31 Application-level software is present and running on the device PID-33 Device includes interactive applications, services, or user interfaces PID-41 Device exposes remote network services PID-411 Device exposes remote services with the ability to send, receive, view or modify sensitive information or configurations
Attributes: component types
API Display Generic Application Generic Hardware Local Application Local Service Operating System User Interface
Attributes: interface types
TCP
Attributes: assets
Software Code Software Configuration
Attributes: dataflows
Endoscope to Surgeon Console 3D viewer (live image) Endoscope to Vision Cart touchscreen (endoscope image) Intuitive Technical Support (dVSTAT) to da Vinci SP system configuration settings over a network connection

Matched threat intel

4

Advisories in our coverage that share an attribute with this product. A shared attribute is a lead, not a finding. The status column shows only what Intuitive has said.

AdvisoryDateSharedIntuitive status
A hospital management backend leaked its own system informationOct 28, 2025Same property (MITRE EMB3D)PID-411No feedback feed from manufacturer
A legacy cardiology system, end-of-service since 2014, recalled for securityJun 10, 2025Same property (MITRE EMB3D)PID-411No feedback feed from manufacturer
A patient monitor with a hidden backdoor that phones homeJan 30, 2025Same property (MITRE EMB3D)PID-411No feedback feed from manufacturer
A 10.0 SQL injection on a patient health portalSep 5, 2024Same property (MITRE EMB3D)PID-411No feedback feed from manufacturer

Threats and weaknesses in matched advisories

MITRE EMB3D threats
TID-116 Latent Privileged Access Port TID-210 Device Vulnerabilities Unpatchable TID-222 Critical System Service May Be Disabled TID-224 Excessive Access via Software Diagnostic Features TID-226 Device leaks security information in logs TID-310 Remotely Accessible Unauthenticated Services TID-320 SQL Injection TID-324 HTTP Direct Object Reference TID-327 Out of Bounds Memory Access TID-401 Undocumented Protocol Features TID-406 Unauthorized Messages or Connections TID-408 Unencrypted Sensitive Data Communication
CWE weaknesses
CWE-1104 Use of Unmaintained Third Party Components CWE-1329 Reliance on Component That is Not Updateable CWE-200 Exposure of Sensitive Information to an Unauthorized Actor CWE-284 Improper Access Control CWE-506 Embedded Malicious Code CWE-639 Authorization Bypass Through User-Controlled Key CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-912 Hidden Functionality