Skip to content
OpenAdvisories
High ICSMA-26-223-02 1 CVE

Pulsetto Vagus Nerve Stimulator (Update A)

Published Aug 11, 2026 · Updated Oct 8, 2026 · Revision 2

Vendor: Pulsetto Product: Vagus Nerve Stimulator (Fit) Product: Vagus Nerve Stimulator (Lite)

Summary

Successful exploitation of this vulnerability could allow an attacker to use could use undocumented commands to modify certain stimulation settings.

Vulnerabilities 1

  • High 8.1
    CVE-2026-18844

    Pulsetto Vagus Nerve Stimulator Hidden Functionality

    The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet…

    Pulsetto Vagus Nerve Stimulator

Revision history

  1. #2

    Update A - Updated Risk Evaluation, updated Affected Products and versions, updated mitigation information.

  2. #1

    Initial Publication

References