<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 17:44:31 +0000</lastBuildDate>
    <item>
      <title>e8a6ef22-c2cd-42f0-9727-0820c174fa1e</title>
      <link>https://vulnerability.circl.lu/sighting/e8a6ef22-c2cd-42f0-9727-0820c174fa1e/export</link>
      <description>{"uuid": "e8a6ef22-c2cd-42f0-9727-0820c174fa1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msty656vxu2n", "content": "Mira Firmware v1.7.1.47 hit by CRITICAL auth flaw (CVE-2026-68067): any format-valid password grants account access. No patch yet \u2014 restrict access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mir...", "creation_timestamp": "2026-08-12T01:30:28.522639Z"}</description>
      <content:encoded>{"uuid": "e8a6ef22-c2cd-42f0-9727-0820c174fa1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msty656vxu2n", "content": "Mira Firmware v1.7.1.47 hit by CRITICAL auth flaw (CVE-2026-68067): any format-valid password grants account access. No patch yet \u2014 restrict access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mir...", "creation_timestamp": "2026-08-12T01:30:28.522639Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e8a6ef22-c2cd-42f0-9727-0820c174fa1e/export</guid>
      <pubDate>Wed, 12 Aug 2026 01:30:28 +0000</pubDate>
    </item>
    <item>
      <title>5ba5eff0-bef2-442c-973d-99e51832e3f8</title>
      <link>https://vulnerability.circl.lu/sighting/5ba5eff0-bef2-442c-973d-99e51832e3f8/export</link>
      <description>{"uuid": "5ba5eff0-bef2-442c-973d-99e51832e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117079947689277739", "content": "Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access &amp;amp; monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067", "creation_timestamp": "2026-08-12T01:30:26.122616Z"}</description>
      <content:encoded>{"uuid": "5ba5eff0-bef2-442c-973d-99e51832e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117079947689277739", "content": "Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access &amp;amp; monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067", "creation_timestamp": "2026-08-12T01:30:26.122616Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ba5eff0-bef2-442c-973d-99e51832e3f8/export</guid>
      <pubDate>Wed, 12 Aug 2026 01:30:26 +0000</pubDate>
    </item>
    <item>
      <title>8a027740-8a27-45c4-b8dd-157ac9e724fa</title>
      <link>https://vulnerability.circl.lu/sighting/8a027740-8a27-45c4-b8dd-157ac9e724fa/export</link>
      <description>{"uuid": "8a027740-8a27-45c4-b8dd-157ac9e724fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstt77jbzg24", "content": "\ud83d\udd34 CVE-2026-68067 - Critical (9.8)\n\nThe login endpoint on the Mira cloud API accepts any format-valid string in the password field an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68067/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T00:01:35.381373Z"}</description>
      <content:encoded>{"uuid": "8a027740-8a27-45c4-b8dd-157ac9e724fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstt77jbzg24", "content": "\ud83d\udd34 CVE-2026-68067 - Critical (9.8)\n\nThe login endpoint on the Mira cloud API accepts any format-valid string in the password field an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68067/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T00:01:35.381373Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8a027740-8a27-45c4-b8dd-157ac9e724fa/export</guid>
      <pubDate>Wed, 12 Aug 2026 00:01:35 +0000</pubDate>
    </item>
    <item>
      <title>ca356b37-55f7-4d49-a85b-0e86609dac90</title>
      <link>https://vulnerability.circl.lu/sighting/ca356b37-55f7-4d49-a85b-0e86609dac90/export</link>
      <description>{"uuid": "ca356b37-55f7-4d49-a85b-0e86609dac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g", "content": "CVE-2026-68067 - mira firmware\nThe Mira Android app has a weak password verification system. This means an attacker could use an email address to access hormone records and account settings. To stay secure,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mirafirmware #CVE #infosec", "creation_timestamp": "2026-08-11T23:40:05.564123Z"}</description>
      <content:encoded>{"uuid": "ca356b37-55f7-4d49-a85b-0e86609dac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g", "content": "CVE-2026-68067 - mira firmware\nThe Mira Android app has a weak password verification system. This means an attacker could use an email address to access hormone records and account settings. To stay secure,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mirafirmware #CVE #infosec", "creation_timestamp": "2026-08-11T23:40:05.564123Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ca356b37-55f7-4d49-a85b-0e86609dac90/export</guid>
      <pubDate>Tue, 11 Aug 2026 23:40:05 +0000</pubDate>
    </item>
    <item>
      <title>a80b09c7-23d6-4646-9b37-9dec85c988b8</title>
      <link>https://vulnerability.circl.lu/sighting/a80b09c7-23d6-4646-9b37-9dec85c988b8/export</link>
      <description>{"uuid": "a80b09c7-23d6-4646-9b37-9dec85c988b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01", "content": "", "creation_timestamp": "2026-08-11T20:15:15.324429Z"}</description>
      <content:encoded>{"uuid": "a80b09c7-23d6-4646-9b37-9dec85c988b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01", "content": "", "creation_timestamp": "2026-08-11T20:15:15.324429Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a80b09c7-23d6-4646-9b37-9dec85c988b8/export</guid>
      <pubDate>Tue, 11 Aug 2026 20:15:15 +0000</pubDate>
    </item>
  </channel>
</rss>
