Shenzhen Shine Industrial Co., Ltd. VitaFit vulnerabilities and fixes
Exploited and high-severity Shenzhen Shine Industrial Co., Ltd. VitaFit vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.5CVE-2026-54381VitaFit Cloud API Storage Bucket Unauthenticated Access Information DisclosureFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 7.7CVE-2026-54382VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 AccessCloudFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 9.3CVE-2026-54384VitaFit Cloud API Authentication Bypass via POST /front/login/sns/Fix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 7.1CVE-2026-54383VitaFit Cloud API Excessive Data Exposure via relation/search EndpointFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 7.5CVE-2026-54374VitaFit Android < 2.8.1.0 Hardcoded Credentials DisclosureFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 8.8CVE-2026-54372VitaFit Android < 2.8.1.0 Insecure TLS Certificate ValidationFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 9.3CVE-2026-54378VitaFit Cloud API Broken Access Control via S3 Token EndpointCloudFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 8.2CVE-2026-54376VitaFit Android < 2.8.1.0 Custom URI Scheme Token HijackingFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read - 8.6CVE-2026-54375VitaFit Android < 2.8.1.0 Long-Lived Session Token ExposureFix availableShenzhen Shine Industrial Co., Ltd. VitaFit
1 min read