CISA Alert on Critical Vulnerabilities in Mirion Medical BioDose/NMIS Software
Sector Threat Intelligence · 2 sources · Updated 4mo ago · First seen Dec 4, 2025
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding multiple high-severity vulnerabilities in the BioDose/NMIS software, a nuclear medicine inventory tracking solution developed by EC2 Software and owned by Mirion Medical. These vulnerabilities, present in versions prior to 23.0, could allow attackers to modify program executables, execute code remotely, and access sensitive information if exploited. The software is widely used in nuclear medicine and radiology departments, raising concerns about the potential impact on healthcare operations and data security.
Mirion Medical has confirmed that the identified flaws have been addressed in the latest release of the software. The company stated that it acted promptly upon learning of the vulnerabilities, working in coordination with CISA and its customers to deliver fixes and mitigate risk. Organizations using affected versions are strongly advised to update to the latest release to ensure protection against these critical security issues.
