Medical Device Cybersecurity News: Week of Monday, August 10, 2026

CISA has added multiple vulnerabilities affecting N-able N-central and Apache Tomcat to the Known Exploited Vulnerabilities catalog, signaling active exploitation of remote monitoring and web server components. Additionally, new advisories for Medixant RadiAnt DICOM and Thermo Fisher genetic analyzers highlight risks to diagnostic data integrity and clinical workflows.

This week, the focus shifts to the software supply chain and remote management tools used to maintain medical device fleets. The addition of authentication bypass vulnerabilities to the CISA Known Exploited Vulnerabilities (KEV) catalog emphasizes that attackers are successfully targeting the administrative channels used by manufacturers to support Class II and III systems.

Security leads must also contend with vulnerabilities in specialized diagnostic software. From genomic data manipulation in laboratory sequencers to denial of service risks in DICOM viewers, the threat landscape covers both the integrity of clinical results and the availability of critical imaging services. We recommend quickly identifying where these components appear in your products and support tools.

In this brief

• Critical Authentication Bypasses in N-able N-central
• Active Exploitation of Apache Tomcat Data Encryption Flaw
• Data Integrity Risks in Thermo Fisher Genetic Analyzers
• Medixant RadiAnt DICOM Out of Bounds Write
• Why This Matters
• What to do this week
• How Blue Goat Cyber Helps
• FAQ

Why This Matters

For medical device manufacturers, these vulnerabilities represent a breakdown in the secure management and transmission of patient data. When remote monitoring tools or web servers are compromised, the entire fleet of connected devices becomes accessible to unauthorized actors. This can lead to unauthorized configuration changes, data exfiltration, or the corruption of diagnostic results, directly impacting patient safety and regulatory standing.

Critical Authentication Bypasses in N-able N-central

Active Exploitation of Apache Tomcat Data Encryption Flaw

Data Integrity Risks in Thermo Fisher Genetic Analyzers

Medixant RadiAnt DICOM Out of Bounds Write

## What to do this week * Cross-reference your Software Bill of Materials (SBOM) for N-able N-central and Apache Tomcat to identify affected products. * Issue a communication to customers using Applied Biosystems Genetic Analyzers regarding the need for network isolation or software updates. * Verify that all clinical image review workstations under your management have been updated to the latest version of RadiAnt DICOM.

How Blue Goat Cyber Helps

Blue Goat Cyber assists medical device manufacturers in navigating the complexities of postmarket cybersecurity requirements. Our team provides expert guidance on vulnerability management, SBOM analysis, and regulatory alignment. We help ensure that your devices remain secure and compliant throughout their entire lifecycle. To learn more about our approach, visit our services page.

FAQ

What is the primary risk of the N-able N-central vulnerabilities?

How does the Apache Tomcat vulnerability affect patient data?

Which version of RadiAnt DICOM fixes the out of bounds write issue?

Get the next issue

Subscribe to stay informed on the latest regulatory and security developments for medical devices at Goat's Weekly.