Threats tagged 'ghsa-rjjc-74j4-hf2v'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-66832Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware · Use of GET request method with sensitive query strings Medium6.9EPSS 0.4%2026-08-11CVE Database V5CVE-2026-66832 When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web properties, referrer logs, and any JavaScript running in the WebView context. EPSS 0.4%Vulnerability CWE-598 #ghsa-rjjc-74j4-hf2v	CVE Database V5	2026-08-11

Page 1 of 1