CVE ID :CVE-2026-54381 Published : Nov. 4, 2026, 10:15 p.m. | 51 minutes ago Description :VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-54381 - VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure

VERWANDTEARTIKEL

CVE-2026-54384 - VitaFit Cloud API Authentication Bypass via POST /front/login/sns/

CVE-2026-57567 - Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview

CVE-2026-97693 - Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

CVE-2026-55368 - h2o: buffer overflow when using the %{error}x log directive

CVE-2026-57566 - Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

CVE-2026-54374 - VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure