CVE-2026-54373 | BDVDB-2026-400103 Detail

Description#

VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to intercept or modify unencrypted HTTP communications due to the absence of an Android network security configuration. Attackers on an untrusted network can manipulate support content displayed to the user by tampering with unencrypted HTTP traffic between the app and server.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-04Record published in the CVE List.
2. Version 22026-11-09Most recent update recorded in the CVE List.