CVE-2026-111494
Incorrect validation of TLS certificates in the MatchPoint Android app
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify communications, including credentials and personal data.
| CWE | CWE-295 |
| Vendor | tpc software |
| Product | matchpoint |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for tpc software matchpoint
Be the first to know when new unknown vulnerabilities affecting tpc software matchpoint are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TPC Software / Matchpoint
Versions prior to latest one
References
Credits
Sergi García Tárraga