https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:42:47.181208+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-66832 CVE-2026-66832 — Mira Hormone Monitor, Mira Android App Use of GET request method with sensitive query strings 2026-10-07T23:42:47.203279+00:00

Affected: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware, Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Android App

When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web properties, referrer logs, and any JavaScript running in the WebView context.