GHSA-r6p2-jjcr-jm7cMediumCVSS 5.3

The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP...

Published
August 12, 2026
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

📋 Description

The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts. An attacker can use brute-force methods to obtain gain access to user accounts.

🔗 References (4)