TPC Software Matchpoint

• CVE-2026-111495 Medium 5.1 API keys, credentials, and configuration parameters embedded in the MatchPoint APK 0.1%
• CVE-2026-111494 Critical 9.1 Incorrect validation of TLS certificates in the MatchPoint Android app 0.2%
• CVE-2026-111493 High 8.7 Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint 0.5%
• CVE-2026-111492 High 8.6 SQL injection in the push notification handler of the MatchPoint Android app 0.2%
• CVE-2026-111491 Medium 6.9 Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences 0.1%
• CVE-2026-111490 Critical 9.9 Insecure direct object reference (IDOR) vulnerability in the MatchPoint API 0.4%
• CVE-2026-111489 Critical 9.9 A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform 0.3%