CVE-2026-111494

Vendor

TPC Software

Product

Matchpoint

CVSS v4.0

9.1 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-295

Exposure class

Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 44
   CVE NVD 3h ago

   Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname…

   Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker…

   CVSS 9.1 CVE-2026-111494 TPC Software