Skip to content

CVE record · 1 source

CVE-2026-54377

CVSS 6.5

VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another…

Vendor: Shenzhen Shine Industrial Co., Ltd.
Product: VitaFit
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 25h ago

VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another…

VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another user's data by supplying a different user_id or profile_id to endpoints such as…

CVSS 6.5 CVE-2026-54377 Shenzhen Shine Industrial Co., Ltd.