TPC Software Matchpoint vulnerabilities

Newest CVEs

• CVE-2026-111495

  API keys, credentials, and configuration parameters embedded in the MatchPoint APK

  TPC Software · Matchpoint

  Medium5.1
• CVE-2026-111494

  Incorrect validation of TLS certificates in the MatchPoint Android app

  TPC Software · Matchpoint

  Critical9.1
• CVE-2026-111493

  Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

  TPC Software · Matchpoint

  High8.7
• CVE-2026-111492

  SQL injection in the push notification handler of the MatchPoint Android app

  TPC Software · Matchpoint

  High8.6
• CVE-2026-111491

  Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences

  TPC Software · Matchpoint

  Medium6.9
• CVE-2026-111490

  Insecure direct object reference (IDOR) vulnerability in the MatchPoint API

  TPC Software · Matchpoint

  Critical9.9
• CVE-2026-111489

  A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform

  TPC Software · Matchpoint

  Critical9.9