CVE-2026-66340: The Mira cloud authentication endpoints do not enforce
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.
- EPSS 0.4% (32.4% percentile)
- CVSS 6.9 medium