CISA ICS Advisory: Mira Hormone Monitor, Mira Android App

CISA published an ICS medical device advisory on August 11, 2026, detailing multiple vulnerabilities in the Mira Hormone Monitor and its companion Android application.

Multiple vulnerabilities in hormone monitoring firmware and app

The advisory describes eight vulnerabilities that could allow an attacker to access unauthorized health profile information, alter health information, cause a denial-of-service condition, disclose session token information, and obtain control of user accounts. The advisory does not state whether any of the vulnerabilities have been exploited in the wild.

Affected products

The following product is affected:

• Mira Monitor Firmware 1.7.1.47

The advisory lists the companion Mira Android App as within scope but does not provide a specific version number. No other versions or products are named.

What to do

• Determine whether any Mira Monitor Firmware 1.7.1.47 devices are in use in your environment.
• Check with the vendor for updated firmware that addresses these vulnerabilities.
• Review and apply all vendor-provided mitigations for the Mira Android App.
• Monitor the vendor’s security channel for patch availability and further guidance.
• Segment affected medical devices from untrusted networks where feasible.

Organizations operating connected medical or fertility monitoring devices should treat vendor firmware updates as high priority when CISA publishes an ICS medical advisory.