CVE-2026-111495

UNKNOWN 0.0

API keys, credentials, and configuration parameters embedded in the MatchPoint APK

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse engineering. The vendor distinguishes the extracted elements from Google Maps and Firebase keys that must remain on the client side and considers them project identifiers, not authentication secrets. The impact depends on the capabilities and restrictions of each exposed element.

Vendor	tpc software
Product	matchpoint
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for tpc software matchpoint

Be the first to know when new unknown vulnerabilities affecting tpc software matchpoint are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TPC Software / Matchpoint

Versions prior to latest one

References

NVD ↗ CVE.org ↗ EPSS Data ↗

incibe.es: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tpc-softwares-matchpoint

Credits

Sergi García Tárraga