CVE-2025-12995

—

CVSS 3.1

9.8 critical

EPSS

<1%p26

Published

Dec 4, 2025 (Dec 4, 2025)

Modified

Jun 17, 2026

Description

Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

Vendors: medtronic
Products: carelink network
Weakness: CWE-307
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.