CVE-2026-111492

Vendor

TPC Software

Product

Matchpoint

CVSS v4.0

8.6 AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-89

Exposure class

Mobile OS, Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   CVE NVD 4h ago

   SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs…

   SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with…

   CVSS 8.6 CVE-2026-111492 TPC Software