<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Roche Diagnostics — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/roche" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Roche Diagnostics (roche).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/roche.png</url>
      <title>Roche Diagnostics — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-9844 · 8.8 HIGH 🌩️ — Vulnerability in navify® Digital Pathology</title>
      <link>https://vulnogram.org/CVE-2026-9844</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9844</guid>
      <description>Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology (RabbitMQ Management interface modules) allows Default Usernames and Passwords. This issue affects navify Digital Pathology: from 2.0.0 before 2.4.1.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 02 Jun 2026 13:23:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-7674 · 7.1 HIGH — navify Monitoring API input validation</title>
      <link>https://vulnogram.org/CVE-2025-7674</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-7674</guid>
      <description>Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input data, which may lead to a denial of service (DoS) due to negatively impacting the server&apos;s performance. This vulnerability has no im…</description>
      <category>High</category>
      <pubDate>Tue, 05 Aug 2025 16:53:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-13026 · 6.1 MEDIUM 👻 — Inadequate Encryption Strength Vulnerability in Roche Algo Edge</title>
      <link>https://vulnogram.org/CVE-2024-13026</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-13026</guid>
      <description>A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the labora…</description>
      <category>Medium</category>
      <category>Unsupported When Assigned</category>
      <pubDate>Fri, 17 Jan 2025 20:02:32 GMT</pubDate>
    </item>
  </channel>
</rss>
