Skip to content

CVE record · 1 source

CVE-2026-54382

CVSS 7.7

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated…

Vendor: Shenzhen Shine Industrial Co., Ltd.
Product: VitaFit
CVSS v3.1: 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Weakness: CWE-266

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

16

CVE NVD 24h ago

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated…

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead…

CVSS 7.7 CVE-2026-54382 Shenzhen Shine Industrial Co., Ltd.