https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:08:30.617282+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-219950 EUVD-2026-219950 2026-10-10T19:08:30.669841+00:00 EUVD-2026-219950 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43201 fkie_cve-2024-43201 2026-10-10T19:08:30.669880+00:00

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 (released on 2024-07-25) and more recently in version 9.9.13 (released on 2025-02-11).

 https://cve.radiocsirt.org/vuln/ghsa-6r2w-57p9-f5hh GHSA-6r2w-57p9-f5hh 2026-10-10T19:08:30.669913+00:00

The Planet Fitness Workouts iOS and Android mobile apps prior to version 9.8.12 (released on 2024-07-25) fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information.

 https://cve.radiocsirt.org/vuln/va-24-262-01 VA-24-262-01 — Planet Fitness Workouts mobile apps do not properly validate TLS certificates 2026-10-10T19:08:30.669929+00:00

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 (released on 2024-07-25) and more recently in version 9.9.13 (released on 2025-02-11).