Clinical systems vulnerability watch
Mitigation-focused monitoring across EHR, imaging, interfaces, laboratory systems and connected devices.
Entries marked SAMPLE are synthetic demonstrations. Other entries cite dated primary evidence. A catalog listing is not a hospital incident report; check product and regional applicability.
| Vulnerability | Criticality | Affected Product | Who is Exposed | Regional Status & Sources |
|---|---|---|---|---|
| CVE-2023-43208 | KNOWN EXPLOITED | NextGen Healthcare Mirth Connect — consult vendor guidance for affected versions | Potentially relevant installations; site-specific and version applicability must be checked with the vendor. | Mitigation: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Global · CISA catalog listing; added 2024-05-20 Reference advisory ↗As of 2026-11-04 |
| Clinical application update SAMPLE | CRITICAL · SAMPLE | Example EHR | Example environment; inventory review required | Mitigation: Review the official vendor advisory, confirm affected versions and apply supported updates. USA · Review pending Reference advisory ↗As of 2026-11-05 |
| Imaging system maintenance SAMPLE | WATCHLIST | Example PACS | Example environment; inventory review required | Mitigation: Review the official vendor advisory, confirm affected versions and apply supported updates. USA · Review pending Reference advisory ↗As of 2026-11-05 |
| Interface engine review SAMPLE | WATCHLIST | Example HL7/FHIR engine | Example environment; inventory review required | Mitigation: Review the official vendor advisory, confirm affected versions and apply supported updates. USA · Review pending Reference advisory ↗As of 2026-11-05 |
| Device software review SAMPLE | WATCHLIST | Example connected device | Example environment; inventory review required | Mitigation: Review the official vendor advisory, confirm affected versions and apply supported updates. USA · Review pending Reference advisory ↗As of 2026-11-05 |
| Laboratory system maintenance SAMPLE | WATCHLIST | Example laboratory information system | Example environment; inventory review required | Mitigation: Review the official vendor advisory, confirm affected versions and apply supported updates. USA · Review pending Reference advisory ↗As of 2026-11-05 |