Skip to content

CVE record · 1 source

CVE-2026-54378

CVSS 9.6

VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary AWS…

Vendor: Shenzhen Shine Industrial Co., Ltd.
Product: VitaFit
CVSS v3.1: 9.6 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Weakness: CWE-522

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

24

CVE NVD 24h ago

VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary AWS…

VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary AWS credentials by calling the POST /front/user/s3/token/ endpoint. Attackers can use…

CVSS 9.6 CVE-2026-54378 Shenzhen Shine Industrial Co., Ltd.