Cybersecurity and Infrastructure Security Agency
CISA advisories, Known Exploited Vulnerabilities, and ICS bulletins that name medical device components, libraries, or vendors.
A use-after-free in Linux kernel netfilter (CVE-2026-0511) was added to the Known Exploited Vulnerabilities catalog, affecting many embedded Linux device platforms.
Read detailsCISA added a BLE pairing bypass affecting an embedded Bluetooth stack used across consumer and medical wearables to the Known Exploited Vulnerabilities catalog.
Read detailsCISA expanded the Secure by Design pledge so signatories are expected to publish VEX statements alongside SBOMs for shipped products.
Read details30-minute strategy session. No cost, no commitment - just answers from people who've shipped 275+ devices supported.
