Skip to contentShenzhen Shine Industrial Co., Ltd. Vitafit vulnerabilities
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API Authentication Bypass via POST /front/login/sns/CVE-2026-543849.3 Critical
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API Excessive Data Exposure via relation/search EndpointCVE-2026-543837.1 High
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 AccessCVE-2026-543826.3 Medium
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API Storage Bucket Unauthenticated Access Information DisclosureCVE-2026-543818.7 High
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API Stored XSS via SVG File UploadCVE-2026-543805.1 Medium
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API Broken Access Control via S3 Token EndpointCVE-2026-543789.3 Critical
- shenzhen shine industrial co., ltd. vitafitVitaFit Cloud API IDOR via profile_id EndpointsCVE-2026-543776.9 Medium
- shenzhen shine industrial co., ltd. vitafitVitaFit Android < 2.8.1.0 Custom URI Scheme Token HijackingCVE-2026-543768.2 High
- shenzhen shine industrial co., ltd. vitafitVitaFit Android < 2.8.1.0 Long-Lived Session Token ExposureCVE-2026-543758.6 High
- shenzhen shine industrial co., ltd. vitafitVitaFit Android < 2.8.1.0 Hardcoded Credentials DisclosureCVE-2026-543748.7 High
- shenzhen shine industrial co., ltd. vitafitVitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security ConfigCVE-2026-543735.1 Medium
- shenzhen shine industrial co., ltd. vitafitVitaFit Android < 2.8.1.0 Insecure TLS Certificate ValidationCVE-2026-543728.7 High