Paper/Archive/CVE-2026-67568

CVE-2026-67568

Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware — Mira Hormone Monitor, Mira Android App Use of Hard-coded Credentials

EPSS 0.4%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 36.4.364 × 207.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.

Affected

ProductAffectedFixed inSource

Mira Firmware1.7.1.47–CNA

Mira Android App4.5.15.4–CNA

Scores by source

icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-223-01.json