CVE ID :CVE-2026-54374 Published : Nov. 4, 2026, 10:18 p.m. | 48 minutes ago Description :VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract confidential third-party integration secrets by decompiling the...

#Sicherheitslücke #Android

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-54374 - VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure

VERWANDTEARTIKEL

CVE-2026-54384 - VitaFit Cloud API Authentication Bypass via POST /front/login/sns/

CVE-2026-57567 - Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview

CVE-2026-97693 - Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

CVE-2026-55368 - h2o: buffer overflow when using the %{error}x log directive

CVE-2026-57566 - Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

CVE-2026-54375 - VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure