{"vulnerability": "CVE-2026-6806", "sightings": [{"uuid": "5ba5eff0-bef2-442c-973d-99e51832e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117079947689277739", "content": "Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access & monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067", "creation_timestamp": "2026-08-12T01:30:26.122616Z"}, {"uuid": "e8a6ef22-c2cd-42f0-9727-0820c174fa1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msty656vxu2n", "content": "Mira Firmware v1.7.1.47 hit by CRITICAL auth flaw (CVE-2026-68067): any format-valid password grants account access. No patch yet \u2014 restrict access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mir...", "creation_timestamp": "2026-08-12T01:30:28.522639Z"}, {"uuid": "a80b09c7-23d6-4646-9b37-9dec85c988b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01", "content": "", "creation_timestamp": "2026-08-11T20:15:15.324429Z"}, {"uuid": "ca356b37-55f7-4d49-a85b-0e86609dac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g", "content": "CVE-2026-68067 - mira firmware\nThe Mira Android app has a weak password verification system. This means an attacker could use an email address to access hormone records and account settings. To stay secure,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mirafirmware #CVE #infosec", "creation_timestamp": "2026-08-11T23:40:05.564123Z"}, {"uuid": "8a027740-8a27-45c4-b8dd-157ac9e724fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstt77jbzg24", "content": "\ud83d\udd34 CVE-2026-68067 - Critical (9.8)\n\nThe login endpoint on the Mira cloud API accepts any format-valid string in the password field an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68067/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T00:01:35.381373Z"}, {"uuid": "a04720ca-1186-4969-8678-ee92a2dd763e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msz4g2snx22s", "content": "CVE-2026-68067 (CVSS 9.8) lets attackers control user accounts on the Mira Hormone Monitor by bypassing the cloud login. Eight flaws total.\n\n#MiraMonitor #CVE202668067 #MedicalDevice #AccountTakeover #CISA #IoTSecurity #Cybersecurity", "creation_timestamp": "2026-08-14T02:29:47.771573Z"}, {"uuid": "62788be2-a7de-43c1-bad9-735c20457401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68062", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtvjyjgioo2g", "content": "SKYSEA Client View\u3068SKYMEC IT Manager\u306b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u88fd\u54c1\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001UDP\u30d1\u30b1\u30c3\u30c8\u3092\u53d7\u4fe1\u3067\u304d\u308b\u5225\u306eWindows\u30b7\u30b9\u30c6\u30e0\u2026\nCVE-2026-68062 CVSS 8.5 | HIGH", "creation_timestamp": "2026-08-25T09:47:17.562778Z"}, {"uuid": "0a822995-5d29-48f6-b503-6a1f61cc6438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68062", "type": "seen", "source": "https://jvn.jp/en/jp/JVN33423625", "content": "", "creation_timestamp": "2026-08-24T08:45:36.027156Z"}, {"uuid": "9182dd56-bedf-41fe-bbc4-af86680d1bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68062", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwccbiygqk2t", "content": "\u300cSKYSEA Client View\u300d\u306a\u3069\u306b\u8907\u6570\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u63d0\u4f9b\n\nSky\u304c\u63d0\u4f9b\u3059\u308bIT\u8cc7\u7523\u7ba1\u7406\u30c4\u30fc\u30eb\u300cSKYSEA Client View\u300d\u300cSKYMEC IT Manager\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u3001\u8a8d\u53ef\u51e6\u7406\u304c\u6b20\u5982\u3057\u3066\u3044\u308b\u8106\u5f31\u6027\u300cCVE-2026-66109\u300d\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306e\u4e0d\u9069\u5207\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u6a29\u8a2d\u5b9a\u300cCVE-2026-69665\u300d\u306b\u5bfe\u5fdc\u3002\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u300cCVE-2026-68062\u300d\u300cCVE-2026-68959\u300d\u3001\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u300cCVE-2026-68960\u300d\u3092\u4fee\u6b63\u3057\u305f\u3002", "creation_timestamp": "2026-09-24T22:24:10.722957Z"}, {"uuid": "f8100f33-5de0-4794-8937-5d5a261df04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68068", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02", "content": "", "creation_timestamp": "2026-09-29T05:00:00.000000Z"}, {"uuid": "76a0a84f-e508-4858-babe-0143fa20a8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6806", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwqcdpa4vj2g", "content": "\ud83d\udfe0 CVE-2026-6806 - High (7.5)\n\nThe Motors \u2013 Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6806/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-30T12:02:39.787666Z"}]}