Threats affecting pkg:apk/android/com.vt.vitafit

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-54374VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows High8.72026-11-05GCVE DatabaseCVE-2026-54374 The VitaFit Android application (com.vt.vitafit) versions before 2.8.1.0 contain a hardcoded credentials vulnerability. Attackers can extract confidential third-party integration secrets by decompiling the APK, including credentials for WeChat, Tencent QQ, and Fitbit. This allows potential abuse of active third-party application registrations. Report on CVE-2026-54374 Vulnerability CWE-798 #ghsa-25r7-r3v7-g6cq	GCVE Database	2026-11-05

Page 1 of 1