CVE ID :CVE-2026-54376 Published : Nov. 4, 2026, 10:18 p.m. | 48 minutes ago Description :VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application to intercept Fitbit login tokens by registering the...

#Sicherheitslücke #Android

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-54376 - VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking

VERWANDTEARTIKEL

CVE-2026-54384 - VitaFit Cloud API Authentication Bypass via POST /front/login/sns/

CVE-2026-57567 - Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview

CVE-2026-97693 - Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

CVE-2026-55368 - h2o: buffer overflow when using the %{error}x log directive

CVE-2026-57566 - Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

CVE-2026-54374 - VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure