LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Vulnerability

Philips reports no product impact from JFrog Artifactory authentication flaw CVE-2026-82329

MedDevice Cyber Staff · Sep 11 · 2 min read · Via Philips security advisories

Philips posted a notice on September 11, 2026 on CVE-2026-82329, a critical flaw in JFrog Artifactory. Philips describes it as an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. At this time, Philips says, no Philips products are known to be impacted, and it continues to analyze the matter.

Artifactory holds the binaries a software team builds and ships. Any manufacturer running it on default settings should treat an admin takeover there as a direct route to tampered release builds.

Are you a representative of Philips? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Philips reports no known product impact from CVE-2026-82329, so no Philips patch is pending. Manufacturers and integrators that run JFrog Artifactory should apply the JFrog fix and move off the default configuration that exposes administrative access.

Patch Artifactory. Apply the JFrog fix for CVE-2026-82329 on every Artifactory instance in the build pipeline.
Close the default configuration. Require authentication for all Artifactory access and remove network reach from untrusted segments.
Verify release artifacts. Check signatures and hashes of recently published builds against the source of record.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure.

Contributing

Wired network

Fix the class in your product

The product exposes an interface with authentication off out of the box. As the maker, make the default configuration the secure configuration: require an admin credential before any interface serves data, and refuse to expose anything until setup is complete.

Default to authenticated. Block every data path until an admin credential is set on first boot.
Make insecure mode explicit. If an open mode must exist, it is a loud, logged, opt in choice, never the starting state.
Test the out of box state. Treat the shipped default as its own threat model.

Mapped EMB3D mitigations

Questions & Answers

What is CVE-2026-82329 in JFrog Artifactory?

According to Philips' September 11, 2026 notice, CVE-2026-82329 is a critical authentication weakness in JFrog Artifactory that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Did Philips find any products affected by JFrog Artifactory CVE-2026-82329?

No. Philips said on September 11, 2026 that no Philips products are known to be impacted by CVE-2026-82329 and that it continues to analyze the matter.

← Back to Vulnerabilities