Loading vulnerability…
Unauthenticated BLE Rebinding and Data Exposure in Mira Hormone Monitor Firmware
CVE-2026-66875 is a high-severity Bluetooth Low Energy vulnerability affecting the Mira hormone monitor ecosystem, specifically Mira firmware version 1.7.1.47 build 01070147 and the associated Android app version 4.5.15.4. A remote attacker within BLE proximity can interact with the device without authentication and silently rebind it to an attacker-controlled account. The same weakness also permits extraction of stored hormone measurements in cleartext, denial of service through malformed or undocumented command opcodes, and passive user tracking because the device uses a static random BLE address that does not rotate. The vulnerability is consistent with missing authentication on security-sensitive BLE operations and inadequate protection of locally stored sensitive data and device privacy mechanisms.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can give an attacker unauthorized control over device association, allowing the device to be linked to an attacker-controlled account. It can also expose sensitive reproductive health measurements stored on the device, disrupt device availability through denial of service, and enable ongoing physical-world tracking of the user through the non-rotating BLE identifier. The combined impact spans confidentiality, integrity, availability, and user privacy.
If you can’t patch tonight, do this now.
Until updates are applied, reduce exposure by limiting device use in untrusted physical environments where nearby BLE attackers could operate, pairing and syncing only in controlled locations, and minimizing unnecessary BLE availability when the device is not actively in use. Organizations evaluating device risk should treat BLE proximity as sufficient attack access and monitor vendor guidance for firmware and app update deployment.
Patch, then assume compromise.
Upgrade affected Mira firmware from version 1.7.1.47 build 01070147 to the vendor-remediated firmware version 01.07.01.53, and update the Mira Android app from version 4.5.15.4 to version 4.5.18. Remediation should include enforcing authentication and authorization for BLE rebinding and other privileged commands, protecting sensitive measurement data from cleartext exposure, validating and safely handling malformed or undocumented opcodes to prevent denial of service, and implementing proper BLE address rotation to reduce trackability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.