CVE-2026-66340
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Aug 11, 2026
Vendor
unknown
Description
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.