Live · 98 sources · updated 17m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 1 source

CVE-2026-54376

CVSS 8.2

VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application…

Vendor
Shenzhen Shine Industrial Co., Ltd.
Product
VitaFit
CVSS v3.1
8.2 AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Weakness
CWE-926
Exposure class
Mobile OS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application…

    VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application to intercept Fitbit login tokens by registering the same callback scheme…

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help