# Shenzhen Shine Industrial Co., Ltd. VitaFit.

Every CVE that names Shenzhen Shine Industrial Co., Ltd. VitaFit among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [VitaFit Cloud API Authentication Bypass via POST /front/login/sns/](https://agentprime.io/advisories/CVE-2026-54384.md)
  `CVE-2026-54384` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass
- [VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint](https://agentprime.io/advisories/CVE-2026-54383.md)
  `CVE-2026-54383` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Broken access control
- [VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access](https://agentprime.io/advisories/CVE-2026-54382.md)
  `CVE-2026-54382` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 6.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Privilege escalation
- [VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure](https://agentprime.io/advisories/CVE-2026-54381.md)
  `CVE-2026-54381` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Broken access control
- [VitaFit Cloud API Stored XSS via SVG File Upload](https://agentprime.io/advisories/CVE-2026-54380.md)
  `CVE-2026-54380` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Cross-site scripting (XSS)
- [VitaFit Cloud API Broken Access Control via S3 Token Endpoint](https://agentprime.io/advisories/CVE-2026-54378.md)
  `CVE-2026-54378` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Hard-coded credentials
- [VitaFit Cloud API IDOR via profile_id Endpoints](https://agentprime.io/advisories/CVE-2026-54377.md)
  `CVE-2026-54377` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Broken access control
- [VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking](https://agentprime.io/advisories/CVE-2026-54376.md)
  `CVE-2026-54376` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 8.2 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-926
- [VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure](https://agentprime.io/advisories/CVE-2026-54375.md)
  `CVE-2026-54375` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 8.6 High · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass
- [VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure](https://agentprime.io/advisories/CVE-2026-54374.md)
  `CVE-2026-54374` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Hard-coded credentials
- [VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config](https://agentprime.io/advisories/CVE-2026-54373.md)
  `CVE-2026-54373` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Weak cryptography or TLS
- [VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation](https://agentprime.io/advisories/CVE-2026-54372.md)
  `CVE-2026-54372` · CVE record: Shenzhen Shine Industrial Co., Ltd. VitaFit · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Weak cryptography or TLS

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=shenzhen-shine-industrial-co-ltd-vitafit>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/shenzhen-shine-industrial-co-ltd-vitafit/>. Everything for agents: <https://agentprime.io/llms.txt>.