Vulnerability Bulletins |
CVE-2026-67558 |
|
| Affected software | ANDROID |
| The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptographic peripheral authentication, MAC allowlist, or bonded-identity check. An attacker could capture live session token information and inject forged hormone measurements into the victim's cloud record and clinical trend view. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-67558 | |