Mira Hormone Monitor, Mira Android App
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to health information, cause a denial-of-service condition, disclose session token information, and obtain control of user accounts. The following versions of Mira Hormone Monitor, Mira Android App are affected: Mira Monitor Firmware 1.7.1.47 (CVE-2026-66875, CVE-2026-66098, CVE-2026-67558, CVE-2026-67568, CVE-2026-68067, CVE-2026-66340, CVE-2026-64934, CVE-2026-66832) Mira Android App 4.5.15.4 (CVE-2026-66875, CVE-2026-66098, CVE-2026-67558, CVE-2026-67568, CVE-2026-68067, CVE-2026-66340, CVE-2026-64934, CVE-2026-66832) CVSS Vendor Equipment Vulnerabilities v3 9.8 Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Hormone Monitor, Mira Android App Missing Authentication for Critical Function, Authentication Bypass by Spoofing, Use of Hard-coded Credentials, Weak Authentication, Improper Restriction of Excessive Authentication Attempts, Reliance on Untrusted Inputs in a Security Decision, Use of GET Request Method With Sensitive Query Strings Background Critical Infrastructure Sectors: Healthcare and Public Health Countries/Areas Deployed: Worldwide Company Headquarters Location: United States Vulnerabilities Expand All + CVE-2026-66875 In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via malformed or undocumented command opcodes, and passively track the user via a static random BLE address that never rotates. View CVE Details Affected Products Mira Hormone Monitor, Mira Android App Vendor: Quanovate Tech Inc. (operating as Mira / Mira Care) Product Version: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Monitor Firmware: 1.7.1.47, Quanovate Tech Inc. (operati
CSIRTS triage
- What
- Multiple vulnerabilities including missing authentication, authentication bypass, and insufficient access controls allow unauthorized access to health data, session token disclosure, account takeover, and denial of service.
- Who is affected
- Users of Mira Hormone Monitor firmware 1.7.1.47 and Mira Android App 4.5.15.4, affecting health monitoring deployments globally.
- Urgency
- Critical urgency; CVSS 9.8 severity with multiple high-impact vulnerabilities affecting protected health information and account integrity.
- Action
- Update to patched versions of Mira Monitor firmware and Mira Android App as soon as available from Quanovate Tech.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Mira Hormone Monitor and Mira Android App
Get an email when a new Mira Hormone Monitor and Mira Android App advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-668750.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-660980.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-675580.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-675680.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-680670.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-663400.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-649340.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-668320.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-66875 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66098 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-67558 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-67568 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-68067 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66340 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-64934 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66832 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- criticalCVE-2026-68067: The login endpoint on the Mira cloud API accepts any format-valid string in the password field…nvd
- criticalCVE-2026-67568: The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductiv…nvd
- highCVE-2026-67558: The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by perfor…nvd
- highCVE-2026-66875: In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated…nvd
- mediumCVE-2026-66340: The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throt…nvd
- mediumCVE-2026-66098: The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without aut…nvd
- mediumCVE-2026-64934: The Mira cloud API accepts the firmware version reported by the companion app as authoritative…nvd
- mediumCVE-2026-66832: When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's…nvd
Recent advisories for Mira Hormone Monitor
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
More from CISA Cybersecurity Advisories
- criticalCareCam Pro IP Cameras2026-09-08
- unknownChina-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. …2026-09-08
- highCISA Adds Four Known Exploited Vulnerabilities to Catalog2026-09-08
- highCISA Adds One Known Exploited Vulnerability to Catalog2026-09-04
- criticalPyramid Solutions NetStaX EtherNet/IP Stack2026-09-03