As cited
Copy frozen at (site build).
vulnerabilities
Flow Neuroscience FL-100
Flow Neuroscience FL-100 brain stimulation devices contain a hard-coded credential shared across all units that allows attackers within Bluetooth range to bypass authentication and manipulate stimulation parameters and safety limits. The vulnerability (CVE-2026-18164) affects versions prior to July 2026 and carries a CVSS score of 8.1. Flow Neuroscience has released firmware updates via the Flow app to remediate the issue.
Why it matters: Healthcare facilities and patients using Flow Neuroscience FL-100 devices face risk of unauthorized modification of critical neurostimulation settings by nearby attackers; firmware updates should be deployed immediately to all affected units.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Flow Neuroscience FL-100
CVE-2026-18164 affects Flow Neuroscience FL-100 and Halo Neuroscience FL-100 brain stimulation devices through a hard-coded credential shared across all units that bypasses authentication. An attacker within Bluetooth range could manipulate brain stimulation parameters and override safety limits on devices deployed worldwide. Flow Neuroscience has released firmware updates via the Flow app to remediate the vulnerability, which carries a CVSS v4.0 score of 7.2.
Why it matters: Healthcare organizations and patients using FL-100 devices need to apply the latest firmware updates immediately, as the vulnerability allows local attackers to alter critical safety parameters on active medical implants or wearables.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Flow Neuroscience FL-100
CVE-2026-18164 affects Flow Neuroscience FL-100 and Halo Neuroscience FL-100 brain stimulation devices through a hard-coded credential shared across all units that bypasses authentication. An attacker within Bluetooth range could manipulate brain stimulation parameters and override safety limits on devices deployed worldwide. Flow Neuroscience has released firmware updates via the Flow app to remediate the vulnerability, which carries a CVSS v4.0 score of 7.2.
Why it matters: Healthcare organizations and patients using FL-100 devices need to apply the latest firmware updates immediately, as the vulnerability allows local attackers to alter critical safety parameters on active medical implants or wearables.
- Source published
- First seen by Cybersecurity Tracker