CyberSecBulletin

Medtronic vulnerabilities

We track 2 vulnerabilities in Medtronic products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2025.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Medtronic vulnerabilities

  • 9.8 Critical severity

    CareLink Network: Improper Restriction of Excessive Authentication Attempts

    CVE-2025-12995Medtronic

    Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

  • 8.8 High severity

    Paceart Optima: Deserialization of Untrusted Data

    CVE-2023-31222MedtronicEPSS 28.5%

    Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing