PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-85104 Sooma CVE debrief

CVE-2026-85104 debrief based on the supplied source corpus. The Sooma 2GEN brain stimulator has a medium-severity vulnerability (CVSS Score: 5.3) that allows unauthenticated changes to brain stimulation parameters within Bluetooth range. This vulnerability, CVE-2026-85104, may require verification of device configurations and patient treatment plans. Compensating controls, such as limiting Bluetooth access or monitoring for unauthorized changes, may be necessary to mitigate potential risks. Further verification is required to determine the full scope of affected versions and potential impact on patient care. Healthcare organizations and medical device administrators should assess

Vendor
Sooma
Product
Sooma tDCS Home Therapy
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-16
Original CVE updated
2026-09-18
Advisory published
2026-09-16
Advisory updated
2026-09-18

Who should care

Healthcare organizations, medical device administrators, and IT teams responsible for managing medical devices should assess their exposure to this vulnerability and verify the configurations of Sooma 2GEN brain stimulators.

Why it matters

CVE-2026-85104 is a medium-severity vulnerability in the Sooma 2GEN brain stimulator that allows unauthenticated changes to brain stimulation parameters within Bluetooth range. Healthcare organizations and medical device administrators should assess their exposure and verify device configurations to mitigate potential risks.

  • Potential unauthorized changes to brain stimulation parameters may require verification of device configurations and patient treatment plans.
  • Compensating controls, such as limiting Bluetooth access or monitoring for unauthorized changes, may be necessary to mitigate potential risks.
  • Further verification is required to determine the full scope of affected versions and potential impact on patient care.

Technical summary

The Sooma 2GEN brain stimulator is vulnerable to unauthenticated changes to brain stimulation parameters within Bluetooth range. This medium-severity vulnerability (CVSS Score: 5.3) allows an attacker to make unauthorized changes to brain stimulation parameters.

Defensive priority

Assess exposure of Sooma 2GEN brain stimulators to unauthorized changes within Bluetooth range.

Recommended defensive actions

  • Verify Sooma 2GEN brain stimulator versions and configurations for potential exposure.
  • Assess Bluetooth connectivity and authorization mechanisms for brain stimulation parameter changes.
  • Consider compensating controls, such as limiting Bluetooth access or monitoring for unauthorized changes.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the full scope of affected versions and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-85104 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-85104

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-85104 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-85104

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://shop.soomamedical.com/pages/all-products

    db4dfee8-a97e-4877-bfae-eba6d14a2166

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.