https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:41:27.154256+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-66875 CVE-2026-66875 — Mira Hormone Monitor, Mira Android App Missing authentication for critical function 2026-10-07T02:41:27.155500+00:00

Affected: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware, Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Android App

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via malformed or undocumented command opcodes, and passively track the user via a static random BLE address that never rotates.