Shenzhen Shine Industrial Co., Ltd. VitaFit

• CVE-2026-54384 Critical 9.8 VitaFit Cloud API Authentication Bypass via POST /front/login/sns/ 0.7%
• CVE-2026-54383 Medium 6.5 VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint 0.2%
• CVE-2026-54382 High 7.7 VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access 0.2%
• CVE-2026-54381 High 7.5 VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure 0.4%
• CVE-2026-54380 Medium 5.4 VitaFit Cloud API Stored XSS via SVG File Upload 0.2%
• CVE-2026-54378 Critical 9.6 VitaFit Cloud API Broken Access Control via S3 Token Endpoint 0.2%
• CVE-2026-54377 Medium 6.5 VitaFit Cloud API IDOR via profile_id Endpoints 0.2%
• CVE-2026-54376 High 8.2 VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking 0.1%
• CVE-2026-54375 High 8.4 VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure 0.2%
• CVE-2026-54374 High 7.5 VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure 0.3%
• CVE-2026-54373 Low 3.5 VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config 0.1%
• CVE-2026-54372 High 8.8 VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation 0.1%