Vulnerability in Flow Neuroscience Fl-100
CVE-2026-18164
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.
Affected products
- Flow Neuroscience Fl-100 — versions 0
- Halo Neuroscience Fl-100 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-18164?
- CVE-2026-18164 is a high-severity vulnerability in Flow Neuroscience Fl-100, classified under Use of Hard-coded Credentials. CVSS score: 8.1/10. Published 2026-08-13.
- How severe is CVE-2026-18164?
- High severity. CVSS v3 base score is 8.1 out of 10.