CVE-2026-111491
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.
| CWE | CWE-256 |
| Vendor | tpc software |
| Product | matchpoint |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for tpc software matchpoint
Be the first to know when new unknown vulnerabilities affecting tpc software matchpoint are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TPC Software / Matchpoint
Versions prior to latest one
References
Credits
Sergi García Tárraga