CVE-2025-4386: Medtronic Mycarelink Patient Monitor 24950

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​

Affected products

• Medtronic Mycarelink Patient Monitor 24950
• Medtronic Mycarelink Patient Monitor 24952

Published 2026-05-07. Last modified 2026-06-17.