CVE-2026-66340
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability in Mira cloud authentication endpoints lacks per-account rate limiting, per-IP throttling, and account lockout after repeated failed login attempts. An attacker can use brute-force methods to gain access to user accounts.
Risk Assessment
An attacker can compromise user accounts through brute-force attacks, potentially leading to unauthorized access to data and resources.
Recommendation
Implement rate limiting, IP throttling, and account lockout mechanisms. Enforce multi-factor authentication.
Original NVD description (English source)
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.