CVE-2026-66098

MediumCVSS 6.5

Published: 11/08/2026(UTC)Updated: 03/09/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow.

Risk Assessment

The risk includes disruption of a medical device, potentially affecting user health and trust in the product. The attack can be carried out remotely by anyone within Bluetooth range.

Recommendation

It is recommended to immediately apply vendor patches and restrict BLE access to the device. Also monitor vendor security advisories.

Other vulnerabilities in Mira hormone monitor firmware

CVE-2026-66875High
In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via malformed or undocumented command opcodes, and passively track the user via a static random BLE address that never rotates.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS