CVE-2026-68067

Name of the Vulnerable Software and Affected Versions Mira cloud API (affected versions not specified)

Description The login endpoint on the Mira cloud API allows authentication using any format-valid string in the password field. This flaw enables an attacker to obtain a live active session token by providing only a valid email address, granting unauthorized control over cloud accounts and access to account settings and hormone record information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.