[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxBjr_r9zCGKF_CeiNYlyYwhEFdUhi8W_KBMb7kc0K_w":3},{"article":4,"iocs":42,"watch_terms":47,"solutions":48,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":29},"7d98dc91-3e69-400e-8db9-8fd85d798367","Pulsetto Vagus Nerve Stimulator","pulsetto-vagus-nerve-stimulator-e0a2ab","View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to use hidden commands to disable electrical safety mechanisms or modify other stimulation output settings. The following versions of Pulsetto Vagus Nerve Stimulator are affected: Pulsetto Vagus Nerve Stimulator vers:all\u002F* (CVE-2026-18844) CVSS Vendor Equipment Vulnerabilities v3 8.1 Pulsetto Pulsetto Vagus Nerve Stimulator Hidden Functionality Background Critical Infrastructure Sectors: Healthcare and Public Health Countries\u002FAreas Deployed: Worldwide Company Headquarters Location: Lithuania Vulnerabilities Expand All + CVE-2026-18844 The firmware of the affected product accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when it is powered on. View CVE Details Affected Products Pulsetto Vagus Nerve Stimulator Vendor: Pulsetto Product Version: Pulsetto Pulsetto Vagus Nerve Stimulator: vers:all\u002F* Product Status: known_affected Remediations Mitigation Pulsetto has not responded to requests to work with CISA to mitigate this vulnerability. Users are encouraged to reach out directly to Pulsetto for assistance at info@pulsetto.tech. mailto:info@pulsetto.tech Relevant CWE: CWE-912 Hidden Functionality Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.1 HIGH CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H 4.0 7.2 HIGH CVSS:4.0\u002FAV:A\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N Acknowledgments A.C. Buglione reported this vulnerability to CISA Legal Notice and Terms of Use This product is provided subject to this Notification (https:\u002F\u002Fwww.cisa.gov\u002Fnotification) and this Privacy & Use policy (https:\u002F\u002Fwww.cisa.gov\u002Fprivacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and\u002For systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov\u002Fics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov\u002Fics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely. Revision History Initial Release Date: 2026-08-11 Date Revision Summary 2026-08-11 1 Initial Publication Legal Notice and Terms of Use","A critical vulnerability (CVE-2026-18844) has been identified in the Pulsetto Vagus Nerve Stimulator, affecting all versions. Attackers can exploit hidden commands sent over Bluetooth Low Energy (BLE) without authentication or encryption to disable safety features or alter stimulation settings. Pulsetto has not yet provided a response to CISA regarding mitigation efforts.","Pulsetto Vagus Nerve Stimulator firmware vulnerability allows disabling safety mechanisms via hidden commands.","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-medical-advisories\u002Ficsma-26-223-02",null,"2026-08-11T12:00:00+00:00","2026-08-11T18:00:06.957874+00:00",8,[17,19,22],{"name":6,"type":18},"product",{"name":20,"type":21},"Pulsetto","vendor",{"name":23,"type":24},"Bluetooth Low Energy","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":25,"icon":12,"name":27,"slug":28},"Vulnerabilities","vulnerabilities",[30,32,37],{"category":31},{"id":25,"icon":12,"name":27,"slug":28},{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":38},{"id":39,"icon":12,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[43],{"type":44,"value":45,"context":46},"cve","CVE-2026-18844","Pulsetto Vagus Nerve Stimulator vulnerability",[20,6],{"controls":49,"vendors":129},[50,71,100],{"slug":51,"name":52,"problem":53,"products":54},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[55,63],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":72,"name":73,"problem":74,"products":75},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":101,"name":102,"problem":103,"products":104},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":145},"unauthenticated-ble-commands-allow-attackers-to-hijack-medical-stimulator","Unauthenticated BLE Commands Allow Attackers to Hijack Medical Stimulator","The Pulsetto Vagus Nerve Stimulator exposes a critical flaw in its Bluetooth Low Energy implementation, allowing attackers to send hidden commands without any authentication or encryption. This means anyone within BLE range can disable safety features or alter stimulation settings on a patient's device, posing direct physical harm. The absence of a vendor response to CISA compounds the risk, leaving users with no official mitigation path. This case highlights how security-by-obscurity and unauthenticated wireless interfaces in medical devices create life-threatening attack surfaces.",[135,136,137,138,139,140,141,142,143,144],"NIST SP 800-82 (ICS Security Guide)","NIST AC-17 (Remote Access Controls)","NIST SC-8 (Transmission Confidentiality and Integrity)","NIST IA-3 (Device Identification and Authentication)","CIS Control 4 (Secure Configuration of Enterprise Assets)","CIS Control 7 (Continuous Vulnerability Management)","CIS Control 12 (Network Infrastructure Management)","FDA Cybersecurity in Medical Devices Guidance (2023)","IEC 62443-4-2 (Security for Industrial Automation – Component Requirements)","GDPR Article 32 (Security of Processing – where patient data is involved)",{}]