Gluware launches IoMT Exposure Management for medical device vulnerability remediation

Gluware has announced Gluware IoMT Exposure Management, an extension of its network automation platform to internet-connected medical devices such as infusion pumps, imaging systems and patient monitors. The product automates the work that follows a vulnerability disclosure: matching CVEs to affected devices, identifying applicable patches, and executing changes within a hospital’s approval and audit process.

The company said the tool runs on the same automation engine and DIAL semantic translation layer it uses across enterprise networks, covering 56 operating systems and 22 vendors. It pulls device inventory from Claroty xDome, enriches CVEs against MITRE data, retrieves Microsoft Update Catalog Knowledge Base updates, and opens change tickets through ServiceNow via Gluware Network RPA.

Gluware cited NIST figures showing CVE submissions rose 263% between 2020 and 2025, and Ordrs 2026 research finding the average connected medical device carries 6.2 known vulnerabilities, with roughly 75% of infusion pumps carrying a flaw listed in CISA’s Known Exploited Vulnerabilities catalog. The product grew out of work with The Ohio State University Wexner Medical Center and is available through an early access programme.