The vulnerability identified as CVE-2026-66340 affects Mira Firmware version 1.7.1.47. The cloud authentication endpoints do not implement controls such as per-account rate limiting, per-IP throttling, or account lockout mechanisms after multiple failed login attempts. This absence of protections enables attackers to use brute-force methods to attempt credential guessing and potentially gain unauthorized access to user accounts. The CVSS 4.0 base score is 6.9, indicating a medium severity level. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Attackers can perform brute-force attacks against user accounts on the affected Mira Firmware version, potentially leading to unauthorized access. The lack of rate limiting and account lockout increases the risk of successful credential guessing attacks. No further impact details such as privilege escalation or data exposure are described.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to monitor authentication attempts and consider implementing external protections such as network-level rate limiting or multi-factor authentication if supported.