CVE-2026-66098
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow.
Risk Assessment
The risk includes disruption of a medical device, potentially affecting user health and trust in the product. The attack can be carried out remotely by anyone within Bluetooth range.
Recommendation
It is recommended to immediately apply vendor patches and restrict BLE access to the device. Also monitor vendor security advisories.
Original NVD description (English source)
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow.