Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:vitafit:vitafit:*:*:*:*:*:android:*:*

2 briefs RSS
high advisory

VitaFit Android: Hardcoded third-party integration credentials (CVE-2026-54374)

The VitaFit Android application versions prior to 2.8.1.0 contain hardcoded credentials for WeChat, Tencent QQ, and Fitbit integrations, allowing attackers to extract them via static analysis of the APK.

VitaFit
2t 2c
high advisory

VitaFit Android Application: Insecure SSL/TLS certificate validation (CVE-2026-54372)

The VitaFit Android application (com.vt.vitafit) before version 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerability allowing man-in-the-middle attacks.

VitaFit Android application +1
1t 2c