On this page
In this issue
FDA & US regulatory
Letters, guidance, enforcement
CISA KEV & CVEs
Vulnerabilities in your SBOM
Standards & international
AAMI, ISO, IEC, EU MDCG
What to do this week
Concrete actions for security leads
Key Takeaways
- CISA added a critical Atlassian file access vulnerability (CVE-2026-21589) to the KEV catalog, threatening design history files.
- A high-severity Windows command injection flaw (CVE-2026-96951) is being actively exploited, impacting legacy imaging and bedside monitors.
- Critical flaws in the J4Care dcm4chee DICOM archive could allow unauthorized manipulation of clinical imaging data.
- A path traversal vulnerability in Thermo Fisher Torrent Suite Software exposes sensitive genomic data.
- Recent MAUDE reports detail a ransomware incident impacting BD Pyxis ES Servers and configuration errors in Beckman Coulter immunoassay analyzers.
The most critical developments this week involve the active exploitation of a file access flaw in Atlassian products and a Windows command injection vulnerability, both added to the CISA KEV catalog. These vulnerabilities pose significant risks to medical device manufacturers using self-hosted development environments or legacy Windows-based clinical systems.
This week’s updates emphasize the persistent threat to both the development pipeline and legacy clinical infrastructure. With active exploits targeting Atlassian suites and Windows Shell flaws, manufacturers must reconcile their internal design history file security with the patch status of bedside monitors and imaging systems in the field.
Furthermore, adverse event reports underscore how ransomware and third-party software integrations can disrupt hospital workflows and diagnostic integrity. These incidents highlight the necessity of validating local fail-safe procedures and auditing software integration points for modular IVD systems.
In this brief
- Atlassian and Windows Vulnerabilities Added to CISA KEV
- Diagnostic Risks in J4Care dcm4chee DICOM Archive
- Thermo Fisher Torrent Suite Software Path Traversal
- MAUDE Reports: Ransomware and Software Integration Failures
- What to do this week
Why This Matters
Medical device manufacturers face dual-sided risks: the theft of intellectual property from development servers and the operational disruption of devices at the point of care. Active exploitation of core infrastructure software means that standard patching cycles may not be fast enough to prevent unauthorized access to sensitive genomic data or the disruption of medication dispensing workflows.
Atlassian and Windows Vulnerabilities Added to CISA KEV
CISA has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.
Diagnostic Risks in J4Care dcm4chee DICOM Archive
High-severity vulnerabilities have been identified in the J4Care dcm4chee DICOM archive, as reported in ICSMA-J4Care-dcm4che.
Thermo Fisher Torrent Suite Software Path Traversal
A path traversal flaw in the Thermo Fisher Torrent Suite Software allows unauthorized actors to bypass folder restrictions.
MAUDE Reports: Ransomware and Software Integration Failures
A recent MAUDE report involving the BD Pyxis ES Server confirms that external network breaches can trigger fail-safe modes, such as Critical Override.
What to do this week
- Audit all self-hosted Atlassian Data Center instances for CVE-2026-21589 and restrict web root directory access.
- Review your SBOM for J4Care dcm4chee components and verify if your current version requires the latest security patches.
- Confirm that all legacy Windows-based devices with diagnostic ports have a documented plan for addressing CVE-2026-96951.
How Blue Goat Cyber Helps
Blue Goat Cyber provides specialized cybersecurity services tailored to the medical device industry, including penetration testing and regulatory strategy. We assist manufacturers in navigating the requirements of Section 524B of the FD&C Act and the FDA's 2026 premarket cybersecurity guidance to ensure devices remain secure throughout their lifecycle. Christian Espinosa and our team help you manage vulnerabilities and maintain compliance.
FAQ
Get the next issue
Stay updated on the latest medical device security trends by subscribing to Goat's Weekly.