Product

VitaFit Cloud API (< 2026-10-30)

1 brief RSS

VitaFit cloud API: Unauthenticated access via cloud storage misconfiguration (CVE-2026-54381)

A misconfigured cloud storage bucket in the VitaFit cloud API allowed unauthenticated attackers to list and download sensitive user data, including over 126,000 profile images.

VitaFit cloud API cloud misconfiguration data-exposure cve-2026-54381

1t 1c 21m ago