CVE-2026-54374

The VitaFit Android application (com.vt.vitafit) versions prior to 2.8.1.0 is vulnerable to a hardcoded credentials disclosure. By decompiling the APK, an attacker can extract confidential third-party integration secrets, specifically for WeChat , Tencent QQ , and Fitbit . These credentials can b...