{"vulnerability": "CVE-2026-68067", "sightings": [{"uuid": "5ba5eff0-bef2-442c-973d-99e51832e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117079947689277739", "content": "Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access & monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067", "creation_timestamp": "2026-08-12T01:30:26.122616Z"}, {"uuid": "e8a6ef22-c2cd-42f0-9727-0820c174fa1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68067", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msty656vxu2n", "content": "Mira Firmware v1.7.1.47 hit by CRITICAL auth flaw (CVE-2026-68067): any format-valid password grants account access. No patch yet \u2014 restrict access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mir...", "creation_timestamp": "2026-08-12T01:30:28.522639Z"}, {"uuid": "a80b09c7-23d6-4646-9b37-9dec85c988b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01", "content": "", "creation_timestamp": "2026-08-11T20:15:15.324429Z"}, {"uuid": "ca356b37-55f7-4d49-a85b-0e86609dac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g", "content": "CVE-2026-68067 - mira firmware\nThe Mira Android app has a weak password verification system. This means an attacker could use an email address to access hormone records and account settings. To stay secure,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mirafirmware #CVE #infosec", "creation_timestamp": "2026-08-11T23:40:05.564123Z"}, {"uuid": "8a027740-8a27-45c4-b8dd-157ac9e724fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstt77jbzg24", "content": "\ud83d\udd34 CVE-2026-68067 - Critical (9.8)\n\nThe login endpoint on the Mira cloud API accepts any format-valid string in the password field an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68067/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T00:01:35.381373Z"}]}