CVE-2026-54377 | Shenzhen Shine Industrial VitaFit 2.8.1.0 Profile Endpoint user_id/profile_id authorization

SecurityVulns
Yanac

A vulnerability described as problematic has been identified in Shenzhen Shine Industrial VitaFit 2.8.1.0. This affects an unknown part of the component Profile Endpoint. The manipulation of the argument user_id/profile_id results in authorization bypass.

This vulnerability was named CVE-2026-54377. The attack may be performed from remote. There is no available exploit.

This product is provided as a managed service, meaning users do not have the ability to maintain vulnerability countermeasures themselves. Upgrading the affected component is recommended.VulDB Recent EntriesRead More