Skip to main content

Mira Care CVE-2026-64934

| EUVDEUVD-2026-56980 MEDIUM
Reliance on Untrusted Inputs in a Security Decision (CWE-807)
2026-08-11 icscert GHSA-v72c-jrwc-x8qx
Information Disclosure Mira Firmware Mira Android App
5.3
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
5.3 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.4 MEDIUM

Network-accessible cloud API requires authenticated session (PR:L); integrity impact added for falsification of vendor fleet version records, absent from the source CVSS 4.0 assessment.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 23:55 vuln.today
CVE Published
Aug 11, 2026 - 21:15 cve.org
MEDIUM 5.3

DescriptionCVE.org

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to evade vendor-side vulnerable-fleet analytics, suppress security update prompts to the user, and misrepresent patch-adoption metrics.

AnalysisAI

Firmware version spoofing in the Mira cloud API allows authenticated users to submit arbitrary firmware version strings for their own registered devices, bypassing server-side validation entirely. Affected products are Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 by Quanovate Tech Inc., operating in a medical IoT context and reported under CISA ICS-CERT advisory ICSMA-26-223-01. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Authenticate to Mira cloud account
Delivery
Intercept companion app firmware version API call
Exploit
Inject arbitrary version string in request
Execution
Cloud backend records spoofed version as authoritative
Persist
Security update prompts suppressed for device
Impact
Device remains unpatched while appearing compliant in fleet analytics
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid, authenticated Mira user account (CVSS PR:L confirmed). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 5.3 (Medium) reflects that exploitation requires an authenticated session (PR:L), which constrains the attack surface to registered Mira account holders with at least one enrolled device. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An authenticated Mira account holder uses a proxy tool (such as Burp Suite) to intercept the companion Android app's API call that reports device firmware version to the Mira cloud backend, then replaces the version string with an arbitrarily higher or targeted value before forwarding the request. The cloud backend records the spoofed version as authoritative, causing update prompts to be suppressed and the device to appear fully patched in vendor fleet analytics. …
Remediation No specific patched version number is independently confirmed from the available intelligence; the CISA ICS-CERT advisory ICSMA-26-223-01 (https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01) is the authoritative source for vendor-issued remediation guidance and should be consulted directly for upgrade paths. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Mira Firmware

View all
CVE-2026-68067 CRITICAL
9.3 Aug 11

Authentication bypass in the Mira fertility-tracking cloud API allows any remote attacker to take over user accounts by

CVE-2026-66340 MEDIUM
6.9 Aug 11

Brute-force credential attacks against Mira's cloud authentication endpoints are unrestricted due to the complete absenc
CVE-2026-66832 MEDIUM
6.9 Aug 11

Session token exposure in the Mira Android app (Quanovate Tech Inc.) leaks live authentication credentials to third-part

Same weakness CWE-807 – Reliance on Untrusted Inputs in a Security Decision

View all
CVE-2026-21509 HIGH POC
7.8
CVE-2026-21514 HIGH
7.8
CVE-2026-64827 CRITICAL POC
9.3
CVE-2025-13926 CRITICAL
9.3
CVE-2019-25711 MEDIUM POC
6.9
CVE-2019-25594 MEDIUM POC
6.9
CVE-2019-25544 MEDIUM POC
6.9
CVE-2026-23848 MEDIUM POC
6.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-64934 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy