Skip to main content

Mira CVE-2026-68067

| EUVDEUVD-2026-56982 CRITICAL
Weak Authentication (CWE-1390)
2026-08-11 icscert GHSA-g9jf-c3gx-prx3
Information Disclosure Mira Firmware Mira Android App
9.3
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.1 CRITICAL

Remote, no-auth login bypass needing only an email (AV:N/AC:L/PR:N/UI:N); full read of and changes to account data (C:H/I:H) but no service-availability impact (A:N).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 11, 2026 - 22:06 vuln.today
CVE Published
Aug 11, 2026 - 21:23 cve.org
CRITICAL 9.3

DescriptionCVE.org

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and account settings.

AnalysisAI

Authentication bypass in the Mira fertility-tracking cloud API allows any remote attacker to take over user accounts by supplying only a victim's email address and an arbitrary password, since the login endpoint validates the email but accepts any format-valid string as the password and returns a live active session token. Affecting Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 (Quanovate Tech Inc, operating as Mira / Mira Care), this reported by CISA (ICSMA-26-223-01) carries a CVSS 4.0 base score of 9.3 and exposes sensitive reproductive-health (hormone) records and account settings. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain target account email
Delivery
Send login request with arbitrary password
Exploit
API returns live session token
Execution
Authenticate to victim account
Impact
Read hormone records and alter settings
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The only concrete prerequisite is knowledge of a valid registered email address for a Mira account; the attacker submits that email with any format-valid password string to the cloud API login endpoint and receives a working session token. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a genuine high-priority issue rather than a high-CVSS-but-low-risk one. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who knows or guesses a target's registered email address sends a login request to the Mira cloud API with that email and any arbitrary password string. The API returns a live, active session token for the victim's account, and the attacker uses it to read the victim's hormone/fertility records and modify account settings. …
Remediation Because the root cause is server-side, the primary remediation is applied by the vendor to the Mira cloud API rather than by end users; organizations and users should monitor CISA ICSMA-26-223-01 (https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01) and the corresponding CSAF (https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-223-01.json) for the vendor's remediation status and update Mira Firmware beyond 1.7.1.47 and the Mira Android App beyond 4.5.15.4 once fixed builds are published - no vendor-released fixed version was identified in the available data, so this should be treated as No vendor-released patch version independently confirmed at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Issue urgent customer notification advising all Mira users of the authentication bypass; contact Quanovate Tech Inc to confirm patch timeline and demand emergency security update; implement immediate API-level rate limiting and password validation enforcement on login endpoints to prevent mass account takeover attempts; deploy WAF rules (if available) to add additional authentication barriers. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Mira Firmware

View all
CVE-2026-66340 MEDIUM
6.9 Aug 11

Brute-force credential attacks against Mira's cloud authentication endpoints are unrestricted due to the complete absenc
CVE-2026-66832 MEDIUM
6.9 Aug 11

Session token exposure in the Mira Android app (Quanovate Tech Inc.) leaks live authentication credentials to third-part
CVE-2026-64934 MEDIUM
5.3 Aug 11

Firmware version spoofing in the Mira cloud API allows authenticated users to submit arbitrary firmware version strings

Same weakness CWE-1390 – Weak Authentication

View all
CVE-2026-55040 CRITICAL POC
9.1
CVE-2025-40552 CRITICAL POC
9.8
CVE-2025-40554 CRITICAL POC
9.8
CVE-2024-34451 CRITICAL POC
9.1
CVE-2024-36787 HIGH POC
8.8
CVE-2024-0822 HIGH POC
7.5
CVE-2025-24070 HIGH POC
7.0
CVE-2025-30412 CRITICAL
10.0

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-68067 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy