CVE-2026-54372

The VitaFit Android application (com.vt.vitafit) before version 2.8.1.0 is vulnerable to insecure TLS/SSL certificate validation. The root cause is a custom X509TrustManager that trusts all certificates and a hostname verifier that accepts any hostname. This flaw allows network-based attackers to...