Uso de credenciales embebidas en Virtuagym

Embedded credentials in Virtuagym Fri, 08/21/2026 - 11:51 Aviso Affected Resources Virtuagym / Resamania Backend API & Mobile Apps. All versions are affected at the time of reporting. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the backend API and mobile app of Virtuagym, a comprehensive technology platform and mobile app specialising in the fitness and health sector. The vulnerability was discovered by Pau Hinojosa.This vulnerability has been…

Číst originál na INCIBE-CERT →

CZ · EN/orig

Virtuagym zdravotnictví obchod ES

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-12587	8.6 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.6.