Forescout Vedere Labs published its 2026 Riskiest Connected Devices report in March, adding eleven new device types. Three are medical: medication dispensing systems, medical image printers, and DICOM gateways.

Two numbers to hold. Healthcare has the highest prevalence of legacy Windows of any vertical, 35 percent, and Telnet exposure in healthcare rose year over year, from 6 to 8 percent. Legacy operating systems and cleartext remote protocols, still, in 2026. The report also argued network infrastructure now outranks endpoints in overall risk, with unmanaged IoMT as the lateral-movement path between them, which reframes the device as the pivot, not just the target.

The DICOM gateway showing up here connects to the year run of DICOM library CVEs. The imaging path is under active study by both researchers and defenders, and it is a good place to spend your own testing budget.