PT-2026-137198
CVE-2026-54373
·
Published
2026-11-04
·
Updated
2026-11-04
Description by
CVSS 3.1
3.5
LowMetricsAV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
VitaFit versions prior to 2.8.1.0
Description
The application lacks an Android network security configuration, which allows network-based attackers to intercept or modify unencrypted HTTP communications. This issue enables attackers on untrusted networks to manipulate support content displayed to the user by tampering with the cleartext traffic between the application and the server.
Recommendations
Update to version 2.8.1.0 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾