VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to…
VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to intercept or modify unencrypted HTTP communications due to the absence of an Android network security configuration. Attackers on an untrusted network can manipulate support content displayed to the user by tampering with unencrypted HTTP traffic between the app and server.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Shenzhen Shine Industrial Co., Ltd.
- Product
- VitaFit
- CVSS v3.1
- 3.5 AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- Weakness
- CWE-319
- Exposure class
- Mobile OS
- NVD status
- Received
Why it ranks 17 (Routine)
- Product class: mobile OS
- Widely deployed vendor product (Shenzhen Shine Industrial Co., Ltd.)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-54373 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.