Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Risk score

52.0

Published

2026-08-11

Status

Received

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow.

Weaknesses

CWE-306

Coverage 1

vulnerability

Mira Hormone Monitor, Mira Android App

Multiple vulnerabilities in the Mira Hormone Monitor and Mira Android App allow an attacker to access unauthorized health profile information, make changes to health data, cause denial-of-service conditions, and potentia…

CISA Advisories · Aug 11, 2026 High

CVE-2026-66875CVE-2026-66098CVE-2026-67558bleauthenticationwebview

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-...
• cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01