PT-2026-70900 · Pulsetto · Vagus Nerve Stimulator

CVE-2026-18844

·

Publicado

2026-08-11

·

Atualizado

2026-08-11

CVSS v3.1

8.1

Alta

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when it is powered on.

Correção

Hidden Functionality

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-18844

Produtos afetados

Vagus Nerve Stimulator