Flaws, advisories, and exploit activity across the connected medical device fleet.
BridgeLink 26.9.0, the open source fork of Mirth Connect, closes the three flaws CISA listed in ICSMA-26-253-01 plus eight inherited third party CVEs. NextGen's own commercial fix landed three weeks earlier.
CVE-2026-87020, detailed in CISA advisory ICSMA-26-253-02, is an integer overflow in Orthanc DICOM Server that produces a heap out of bounds write when the server decodes a malicious PNG or JPEG. Version 1.13.0 fixes it.
CISA advisory ICSMA-26-253-01 lists three high severity vulnerabilities in NextGen Healthcare's Mirth Connect integration engine: a SQL injection in the Database Connector API and two XML external entity flaws. Version 4.7.2 fixes all three.
Philips published a September 4 advisory for CVE-2026-75604, a Next.js path traversal scored 9.0 that lets remote requests read private build data on Windows hosts and reach remote code execution. Versions 13.4.0 through 15.5.23 and 16.0.0 through 16.3.2 are affected, and Vercel fixed it in 15.5.24 and 16.3.3. Philips says no Philips products are known to be impacted at this time.
CISA advisory ICSMA-26-225-01: every Flow Neuroscience FL-100 shares one hardcoded credential, CVE-2026-18164, CVSS 8.1. An attacker in Bluetooth range can alter brain stimulation parameters. Firmware before July 2026 is affected; the fix ships through the Flow app.
CVE-2026-18844 rates 8.1 on CVSS v3.1. The Pulsetto vagus nerve stimulator’s firmware accepts undocumented Bluetooth Low Energy commands with no authentication, letting anyone in range disable electrical safety mechanisms or change stimulation output. Every version is affected, CISA got no answer from the vendor, and no patch exists.
ICSMA-26-223-01 lists eight CVEs in the Mira Hormone Monitor and its Android app. CVE-2026-68067 (9.8) let the cloud API hand a session token to anyone holding a user’s email address, and CVE-2026-67568 (9.1) shipped hard-coded credentials inside the APK. Fixed in iOS 3.5.18, Android 4.5.18, and firmware 01.07.01.53.
Four medical advisories this year hit GDCM, pydicom, OHIF and DCMTK. Not niche libraries. The imaging plumbing inside commercial products.
A security vendor’s breach. A DICOM toolkit. A Windows kernel RCE. A Defender bypass. Four advisories in two months, none for a bug Philips wrote.
ICSMA-26-218-01: RadiAnt DICOM 2025.2 and earlier contain a heap overflow triggered by maliciously crafted JPEG pixel data in a DICOM file, a potential path to code execution. Update to 2026.1.
ICSMA-26-216-01: data-collection software for Applied Biosystems genetic analyzers lacked integrity checking on its output files. A proof of concept merged two DNA profiles without tripping any warning.
GDCM, pydicom, the OHIF viewer and OFFIS DCMTK all drew medical advisories in 2026. These libraries are the imaging plumbing inside commercial products, which means the advisories are really about your SBOM.
Roche disclosed CVE-2026-9844 in navify Digital Pathology: the bundled RabbitMQ management interface shipped with default guest credentials unless changed, opening network access to messaging and management functions.
ICSMA-26-148-01: the Frontier X wearable ECG monitor and its apps allow reading and writing arbitrary handle values without authentication, CVSS 8.8, potentially altering clinical readings.
ICSMA-26-146-01: the Eppendorf BioFlo 320 bioprocess controller ships a hard-coded password on its VNC remote-access interface, giving full control of the bioreactor to anyone who reaches it.
A Baxter bulletin flagged that Abacus supports encrypted client-server communication but did not enable transport encryption by default in legacy configurations, leaving SQL traffic open to interception.
GE HealthCare recalled certain Revolution CT systems over a vulnerability in the AW Server deployed via its Edison Health Link subscription. About 200 systems worldwide, no breaches reported.
CERT/CC VU#536588: nine flaws in the Orthanc open-source DICOM server through 1.12.10, including heap overflows in the image decoder rated up to critical and decompression-bomb memory exhaustion.
GE HealthCare issued an urgent correction for Centricity Universal Viewer after a flaw exposed user login credentials on the local client. An attacker with physical access could harvest them. FDA logged it as a Class 2 recall.
Siemens Healthineers SSA-016040: syngo.plaza VB30E stored passwords with weak encoding, letting an attacker recover the originals and gain unauthorized access. Fixed in VB30E_HF07.
ICSMA-26-041-01: the ZOLL ePCR iOS app reflected unsanitized field input into a WebView, opening script injection that could expose PHI captured in the field.
ICSMA-25-364-01: WHILL Model C2 and Model F powered chairs accepted Bluetooth control without authentication, CVSS 9.8. An attacker in range could stop or steer the chair.
ICSMA-25-345-02: an uncontrolled search path in Varex/Panoramic dental imaging software lets a standard user escalate to SYSTEM through the ccsservice.exe component.
Medtronic disclosed four flaws in the CareLink Network web layer, including observable-response user enumeration, after researchers probed a non-production instance at a security conference. Patched, no patient harm.
ICSMA-25-336-01: five high-severity flaws in Mirion Medical EC2 software (NMIS, BioDose), including hard-coded credentials and authentication enforced on the client.
ICSMA-25-301-01: Vertikal Systems Hospital Manager backend exposed sensitive system information to unauthorized users and returned error messages stuffed with more of it.
ICSMA-25-296-01: Nihon Kohden CNS-6201 central monitoring stations can be pushed into a denial of service, CVSS 7.5. The station is the screen that aggregates bedside vitals.
ICSMA-25-294-01: the MinKNOW software that drives Oxford Nanopore sequencers shipped with missing authentication for a critical function, CVSS 8.6, plus weakly protected credentials.
Vulnerabilities in the Automated Impella Controller’s operating system could allow loss of device control or an unexpected pump stop. FDA classified the action Class I on potential harm alone.
ICSMA-25-233-01: FUJIFILM Synapse Mobility lets an authenticated low-privilege user manipulate a web search parameter to reach imaging and patient data beyond their assigned role.
ICSMA-25-224-01 covers five bugs in Santesoft Sante PACS Server before 4.2.3, including a double free that crashes the archive on a crafted HL7 message and a web portal that transmits credentials in the clear.
ICSMA-25-205-01: the Medtronic MyCareLink monitor stored data unencrypted, shipped a built-in account with an empty password, and deserialized untrusted data. Physical access required, no evidence of exploitation.
ICSMA-25-198-01: Panoramic Digital Imaging Software was vulnerable to DLL hijacking inherited from an unsupported third-party SDK, letting a standard user escalate to SYSTEM.
Roche disclosed CVE-2025-7674 in navify Monitoring: an API lacked adequate input validation, so crafted or excessive data could be processed unsafely and knock the service over. Fixed before 1.08.00.
ICSMA-25-121-01 and ICSMA-25-160-01: MicroDicom DICOM Viewer took out-of-bounds write and read findings a month apart, both reachable by opening a crafted DICOM file, both around CVSS 8.8.
GE HealthCare recalled legacy MUSE cardiology systems after finding an outside party could view and manipulate stored patient data. About 4,200 systems, some out of service support since 2014.
ICSMA-25-100-01: INFINITT PACS System Manager had two unrestricted file-upload flaws toward remote code execution plus an information-exposure bug, on the server that holds the imaging archive.
Philips flagged deserialization of untrusted data in IntelliSpace Portal and Advanced Visualization Workspace: .NET Remoting on TCP 755 with TypeFilterLevel set to Full, a path to remote code execution.
CISA hit Sante DICOM Viewer Pro twice in 2025: an out-of-bounds write (ICSMA-25-079-01) and later an out-of-bounds read (ICSMA-25-148-01), both triggered by opening a crafted file.
ICSMA-25-072-01: Philips IntelliSpace Cardiovascular built its auth tokens on a fixed AES-128 key identical across all installations, and let the login token be replayed to bypass authentication.
ICSMA-25-051-01: RadiAnt DICOM Viewer failed to verify the update server TLS certificate, giving a man-in-the-middle attacker a path to deliver a malicious update.
ICSMA-25-037-02: Orthanc Server before 1.5.8 did not enable authentication by default when the HTTP interface was exposed, leaving imaging records reachable to any unauthenticated attacker.
ICSMA-25-030-01: the Contec CMS8000 monitor firmware beacons to a hard-coded IP and can pull and run files. CISA and FDA issued companion backdoor fact sheets, and the same firmware sits in relabeled monitors.
ICSMA-24-352-01: BD Diagnostic Solutions instruments including BACTEC and Phoenix shipped with default credentials, letting an attacker with network access read, modify or delete data including PHI.
Siemens Healthineers SHSA-160244: syngo.plaza VB30E failed to sanitize input before the SQL server, letting an unauthenticated network attacker run arbitrary SQL and compromise the whole database.
ICSMA-24-319-01: Baxter Life2000 Ventilation System carried nine CVEs, two rated a maximum 10.0, spanning hard-coded credentials, cleartext transmission, an exposed JTAG interface and missing authentication.
ICSMA-24-249-01: the Baxter Connex Health Portal had a critical unauthenticated SQL injection, base score 10.0, letting a remote attacker run arbitrary SQL, plus an access-control flaw exposing patient and clinician data.