What is CVE-2026-68067?

CVE-2026-68067 is a critical-severity vulnerability in Quanovate Tech Inc. (Operating As Mira / Care) Android App, classified under Weak Authentication. CVSS score: 9.8/10. Published 2026-08-11.

How severe is CVE-2026-68067?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Quanovate Tech Inc. (Operating As Mira / Care) Android App

CVE-2026-68067

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control c…

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Quanovate Tech Inc. (Operating As Mira / Care) Android App — versions 4.5.15.4
Quanovate Tech Inc. (Operating As Mira / Care) Firmware — versions 1.7.1.47

Weakness classification (CWE)

CWE-1390 — Weak Authentication

References

Frequently asked questions

What is CVE-2026-68067?: CVE-2026-68067 is a critical-severity vulnerability in Quanovate Tech Inc. (Operating As Mira / Care) Android App, classified under Weak Authentication. CVSS score: 9.8/10. Published 2026-08-11.
How severe is CVE-2026-68067?: Critical severity. CVSS v3 base score is 9.8 out of 10.