CVE-2026-64934

Name of the Vulnerable Software and Affected Versions Mira cloud API (affected versions not specified)

Description The Mira cloud API relies on the firmware version reported by the companion app as authoritative for a device without independently verifying the version from the device itself. An authenticated attacker can submit arbitrary firmware version strings for their own device. This allows the attacker to evade vendor-side vulnerable-fleet analytics, suppress security update prompts shown to the user, and misrepresent patch-adoption metrics.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.