[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGDfH1asyDinVQpmP0Jz2vn__yR0vOSpjC34fcLH5EQc":3},{"article":4,"iocs":45,"watch_terms":50,"solutions":51,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":32},"4b2fe92b-d45b-4b12-bb07-08ebbf2c6a81","Flow Neuroscience FL-100","flow-neuroscience-fl-100-cf3bb9","View CSAF Summary Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and override safety limits. The following versions of Flow Neuroscience FL-100 are affected: Flow Neuroscience FL-100 Halo Neuroscience FL-100 CVSS Vendor Equipment Vulnerabilities v3 8.1 Flow Neuroscience Flow Neuroscience FL-100 Use of Hard-coded Credentials Background Critical Infrastructure Sectors: Healthcare and Public Health Countries\u002FAreas Deployed: Worldwide Company Headquarters Location: Sweden Vulnerabilities Expand All + CVE-2026-18164 An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarilymanipulate brain stimulation parameters and state. View CVE Details Affected Products Flow Neuroscience FL-100 Vendor: Flow Neuroscience Product Version: Flow Neuroscience Flow Neuroscience FL-100: \u003CJuly_2026, Flow Neuroscience Halo Neuroscience FL-100: \u003CJuly_2026 Product Status: known_affected Remediations Mitigation Users are encouraged to install the latest firmware updates provided by Flow Neuroscience via the Flow app. Relevant CWE: CWE-798 Use of Hard-coded Credentials Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.1 HIGH CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H 4.0 7.2 HIGH CVSS:4.0\u002FAV:A\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N Acknowledgments A.C. Buglione reported this vulnerability to CISA Legal Notice and Terms of Use This product is provided subject to this Notification (https:\u002F\u002Fwww.cisa.gov\u002Fnotification) and this Privacy & Use policy (https:\u002F\u002Fwww.cisa.gov\u002Fprivacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and\u002For systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov\u002Fics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov\u002Fics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely. Revision History Initial Release Date: 2026-08-13 Date Revision Summary 2026-08-13 1 Initial Publication Legal Notice and Terms of Use","A critical vulnerability (CVE-2026-18164) has been identified in Flow Neuroscience's FL-100 and Halo devices, allowing attackers within Bluetooth range to bypass authentication and manipulate brain stimulation parameters. The issue stems from an undocumented, shared hard-coded credential. While not remotely exploitable, CISA recommends immediate firmware updates and network isolation for affected devices, which are deployed worldwide in the healthcare sector.","Flow Neuroscience FL-100 devices have a hard-coded credential vulnerability.","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-medical-advisories\u002Ficsma-26-225-01",null,"2026-08-13T12:00:00+00:00","2026-08-13T18:00:07.290605+00:00",8,[17,20,22,25],{"name":18,"type":19},"FL-100","product",{"name":21,"type":19},"Halo",{"name":23,"type":24},"Flow Neuroscience","vendor",{"name":26,"type":27},"Bluetooth","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":12,"name":30,"slug":31},"Vulnerabilities","vulnerabilities",[33,38,40],{"category":34},{"id":35,"icon":12,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":28,"icon":12,"name":30,"slug":31},{"category":41},{"id":42,"icon":12,"name":43,"slug":44},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[46],{"type":47,"value":48,"context":49},"cve","CVE-2026-18164","Hard-coded credential vulnerability in Flow Neuroscience FL-100.",[23,18,21],{"controls":52,"vendors":140},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"patch-management","Automated patch management","Known holes get closed in days, not months.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":83,"name":84,"problem":85,"products":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":112,"name":113,"problem":114,"products":115},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[],{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":158},"hard-coded-credentials-in-medical-brain-stimulation-device-enable-bluetooth-auth-bypass","Hard-Coded Credentials in Medical Brain Stimulation Device Enable Bluetooth Auth Bypass","The FL-100 and Halo devices shipped with an undocumented, shared hard-coded credential — a fundamental design flaw that eliminates authentication as a meaningful security control. Any attacker within Bluetooth range can exploit this to manipulate brain stimulation parameters, posing direct physical harm to patients. Hard-coded credentials are especially dangerous in medical devices because they cannot be changed by end users and affect every deployed unit simultaneously. This case underscores that security-by-obscurity is not a substitute for proper credential management, and that connected medical devices carry life-safety implications far beyond typical IT assets.",[146,147,148,149,150,151,152,153,154,155,156,157],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 IA-5: Authenticator Management (prohibition of default\u002Fshared credentials)","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 SC-8: Transmission Confidentiality and Integrity","NIST Cybersecurity Framework: PR.AC-1, PR.IP-1","FDA Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions (2023)","IEC 62443-4-2: Security for Industrial Automation and Control Systems — Component Security Requirements","GDPR Article 32: Security of Processing (where patient data may be involved)","HIPAA Security Rule 45 CFR §164.312(a)(2)(i): Unique User Identification","CISA ICS-CERT Advisory Best Practices: Network Isolation for Critical Medical Devices",{}]