CVE ID :CVE-2026-111494 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted...

#Sicherheitslücke #Android

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111494 - Incorrect validation of TLS certificates in the MatchPoint Android app

VERWANDTEARTIKEL

CVE-2026-58273 - Rucio: Authorisation Bypass on REST API endpoint for signing URLs

CVE-2026-33944 - Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter

CVE-2026-122267 - MinIO Signature V4 Authentication Bypass Vulnerability

CVE-2026-119757 - BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

CVE-2026-111493 - Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

CVE-2026-111489 - A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform