Will Pulsetto Vagus Nerve Stimulator vulnerability lead to documented device compromise by end of 2026?

CISA has published an advisory on a critical vulnerability in Pulsetto Vagus Nerve Stimulator medical devices. Successful exploitation allows attackers to use hidden commands to disable electrical safety mechanisms or modify stimulation output, potentially endangering patient safety. The vulnerability affects deployed medical devices in clinical use.

Resolution Criteria

Documented evidence of exploitation via CISA KEV addition, vendor security alert of confirmed breach, hospital/clinic incident reports, or FDA medical device report (MDR) detailing compromised devices.