Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-18164

Flow Neuroscience FL-100 Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Flow Neuroscience FL-100

Default version status: unaffected

  • 0 to < July 2026affected

Halo Neuroscience FL-100

Default version status: unaffected

  • 0 to < July 2026affected

References