Product by Shenzhen Shine Industrial Co., Ltd.

    Vitafit

    12 known vulnerabilities in Vitafit (Shenzhen Shine Industrial Co., Ltd.), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Vitafit (Shenzhen Shine Industrial Co., Ltd.)
    CriticalCVE-2026-54384

    VitaFit Cloud API Authentication Bypass via POST /front/login/sns/

    		9.8
    HighCVE-2026-54381

    VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure

    		7.5
    CriticalCVE-2026-54378

    VitaFit Cloud API Broken Access Control via S3 Token Endpoint

    		9.6
    HighCVE-2026-54374

    VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure

    		7.5
    HighCVE-2026-54372

    VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation

    		8.8
    HighCVE-2026-54375

    VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure

    		8.4
    HighCVE-2026-54376

    VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking

    		8.2
    HighCVE-2026-54382

    VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access

    		7.7
    HighCVE-2026-54383

    VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint

    		6.5
    MediumCVE-2026-54377

    VitaFit Cloud API IDOR via profile_id Endpoints

    		6.5
    MediumCVE-2026-54380

    VitaFit Cloud API Stored XSS via SVG File Upload

    		5.4
    MediumCVE-2026-54373

    VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config

    		3.5

    All products by Shenzhen Shine Industrial Co., Ltd.