Vulnerability

Cepheid GeneXpert Dx 6.4a needs Windows 10 update KB5068781 for 32 CVEs

MedDevice Cyber Staff · Mar 12 · 2 min read · Via Cepheid product security updates

On March 12, 2026 Cepheid posted a Critical Vulnerability Notification for GeneXpert Dx 6.4a. The Windows 10 build underneath, version 21H2 or 22H2, is missing Microsoft's November 2025 security update, KB5068781. Cepheid lists 32 CVEs in scope, including CVE-2025-59505, CVE-2025-60703 and CVE-2025-62215.

Cepheid describes the set as spanning remote code execution, privilege escalation, information disclosure and kernel level issues. The fix is Microsoft's cumulative update, which Cepheid links directly. Sites that have turned automatic updates off must install it by hand.

A lab analyzer's workstation is a Windows PC with a validated application on top. If patching it waits for a vendor notice, it runs months behind the desktop fleet.

Are you a representative of Cepheid? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Install Microsoft cumulative update KB5068781 on every GeneXpert Dx 6.4a workstation running Windows 10 21H2 or 22H2, as Cepheid's March 12, 2026 notice directs. Sites with automatic updates disabled must apply it manually. Confirm the update in Windows Update history afterward.

Find the Dx 6.4a stations. List every GeneXpert Dx workstation on Dx 6.4a and record its Windows 10 build and update setting.
Install KB5068781. Apply the November 2025 cumulative update from Cepheid's linked Microsoft catalog download where automatic updates are off.
Put the analyzers on a cycle. Add lab analyzer workstations to the monthly Windows patch cycle with a validation check, so the next update does not wait for a vendor notice.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Named operating system

Contributing

Off-the-shelf software Hospital network

GeneXpert Dx

PID-23 Named operating system Off-the-shelf software

Fix the class in your product

The flaw is in the OS inside the controller, or a system past end of service still in the field. As the maker, own the embedded OS and server lifecycle as a safety obligation, design controllers to update in the field, and make every fault degrade to a defined safe state.

Own the OS lifecycle. Patch the OS and server components on a schedule with a tested delivery path.
Design for field update. And for planned replacement, so an unpatchable unit has a path off the network.
Degrade to safe. A fault drives a defined safe state, never an unexpected stop on a life-sustaining device.

Mapped EMB3D mitigations

Questions & Answers

Which Windows update does Cepheid GeneXpert Dx 6.4a need?

Cepheid's March 12, 2026 notice says GeneXpert Dx 6.4a on Windows 10 21H2 or 22H2 needs Microsoft's November 2025 cumulative update KB5068781, which addresses 32 listed CVEs.

Is CVE-2025-62215 relevant to Cepheid GeneXpert systems?

Yes. Cepheid lists CVE-2025-62215 among the 32 CVEs fixed by KB5068781 that affect the Windows 10 install on GeneXpert Dx 6.4a, per its March 12, 2026 notice.

Do GeneXpert Dx customers with automatic updates off need to act on KB5068781?

Yes. Cepheid says customers with auto update disabled must manually install KB5068781 on GeneXpert Dx 6.4a systems to remain protected.

← Back to Vulnerabilities