Skip to content

CVE record · 1 source

CVE-2026-111489

CVSS 9.9

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform.

Vendor: TPC Software
Product: Matchpoint
CVSS v4.0: 9.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

CVE NVD 4h ago

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform.

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

CVSS 9.9 CVE-2026-111489 TPC Software