LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Leica Biosystems

Leica Biosystems

Leica Biosystems in MedDevice Cyber coverage: 6 stories, 14 products named, 4 CVEs, and the company's own disclosures.

Public disclosure program
Follow Leica BiosystemsClaim this page
Stories
6
Products named
14
Product CVEs
4
Responses on record
0
Latest story
Oct 23, 2026

Coverage

6 stories
01
Vulnerability

Leica Biosystems posts PHP2Shell notice for PHP versions before 8.5.11

Leica Biosystems said on October 23, 2026 it had been notified of two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, affecting PHP prior to 8.5.11.

Leica BiosystemsOct 232 min read
02
Vulnerability

Leica Biosystems flags BeyondTrust remote support flaw CVE-2026-1731

Leica Biosystems posted a February 6, 2026 advisory on CVE-2026-1731, a critical pre-authentication remote code execution flaw in BeyondTrust Remote Support and Privileged Remote Access.

Leica BiosystemsFeb 62 min read
03
Vulnerability

Leica Biosystems Aperio and CEREBRO products affected by Mirth Connect vulnerabilities

Leica Biosystems says five Aperio and CEREBRO products embed NextGen Mirth Connect 4.4.1 or earlier, exposed to CVE-2023-37679 and CVE-2023-43208. NextGen's fix is Mirth Connect 4.4.2 or higher, and Leica is updating installers.

Leica BiosystemsJan 263 min read
04
Vulnerability

Leica Biosystems to remove leftover Axeda RemoteCare software over Access:7 flaws

Leica Biosystems said on April 6, 2022 that Axeda software from its discontinued RemoteCare service may remain on BOND, CEREBRO, HistoCore, ASP and PELORIS systems, exposed to Access:7 (CVE-2022-25246 to CVE-2022-25252). It will remove it at the next maintenance visit.

Leica BiosystemsApr 63 min read
05
Vulnerability

Leica Biosystems reports limited product impact from Log4Shell

Leica Biosystems said on January 7, 2022 that its products had limited impact from Log4Shell, CVE-2021-44228 in Apache Log4J.

Leica BiosystemsJan 72 min read
06
Vulnerability

Leica Biosystems Aperio VERSA and CytoVision affected by CodeMeter flaw in LAS X software

Leica Biosystems said on October 15, 2020 that a WIBU Systems CodeMeter flaw in LAS X software affects internet-connected Aperio VERSA v1.0.4 and CytoVision v7.6 and v7.7. Block TCP port 22350 or uninstall CodeMeter.

Leica BiosystemsOct 152 min read

Products in our coverage

Products and threat intel

3

Leica Biosystems products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Aperio GT 450 DXWhole Slide Imaging System2428
Aperio GT 450 DX; Aperio GT 180 DXWhole Slide Imaging System224
Aperio iQC DX SoftwareDigital Pathology Image Artifact Detection Software Device60

CVEs in coverage of Leica Biosystems products

CVE-2022-25246 CVE-2022-25252 CVE-2023-37679 CVE-2023-43208
← All manufacturers