CVE-2026-66340: The Mira cloud authentication endpoints do not enforce

The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions