LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Wind River

Wind River

Wind River in MedDevice Cyber coverage: 1 story, 1 product named, 10 CVEs, and the company's own disclosures.

Follow Wind RiverClaim this page
Stories
1
Products named
1
Product CVEs
10
Responses on record
0
Latest story
Oct 1, 2019

Coverage

1 story
01
Vulnerability

Interpeak IPnet TCP/IP stack flaws reach VxWorks and other RTOS builds in medical devices

CISA advisory ICSMA-19-274-01 covers 11 vulnerabilities in the Interpeak IPnet TCP/IP stack, including CVE-2019-12256, CVE-2019-12255 and CVE-2019-12260 at CVSS v3 9.8, affecting VxWorks, ENEA OSE, Green Hills INTEGRITY and other RTOS builds. Wind River has patches; device makers must ship them.

CISAOct 14 min read

Products in our coverage

  • VxWorks 6.5 and earlier; 6.9.4.11, Vx7 SR540, Vx7 SR610; VxWorks 653 MCE 3.x; bootrom network stack real-time operating system

CVEs in coverage of Wind River products

CVE-2019-12255 CVE-2019-12256 CVE-2019-12257 CVE-2019-12258 CVE-2019-12259 CVE-2019-12260 CVE-2019-12262 CVE-2019-12263 CVE-2019-12264 CVE-2019-12265
← All manufacturers