CVE-2026-85104CWE-924

CVE-2026-85104

published September 16, 2026

CVSS
5.3
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation

parameters.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
5.3 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-924 · Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Published
2026-09-16T18:17Z
References (1)
https://shop.soomamedical.com/pages/all-products · db4dfee8-a97e-4877-bfae-eba6d14a2166
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 13:38Z
    Brain stimulation parameters can be modified via Bluetooth in Sooma
    cvelistv5