Skip to content

CVE record · 1 source

CVE-2026-111491

CVSS 6.9

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences.

Vendor: TPC Software
Product: Matchpoint
CVSS v4.0: 6.9 AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-256
Exposure class: Mobile OS, Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 4h ago

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences.

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them…

CVSS 6.9 CVE-2026-111491 TPC Software