Skip to content

CVE record · 1 source

CVE-2026-54384

CVSS 9.8

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a…

Vendor: Shenzhen Shine Industrial Co., Ltd.
Product: VitaFit
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-290
Exposure class: Collaboration

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 22h ago

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a…

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the…

CVSS 9.8 CVE-2026-54384 Shenzhen Shine Industrial Co., Ltd.