CVE ID :CVE-2026-111493 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifiers. An unauthenticated remote attacker could...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111493 - Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

VERWANDTEARTIKEL

CVE-2026-58273 - Rucio: Authorisation Bypass on REST API endpoint for signing URLs

CVE-2026-33944 - Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter

CVE-2026-122267 - MinIO Signature V4 Authentication Bypass Vulnerability

CVE-2026-119757 - BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

CVE-2026-111494 - Incorrect validation of TLS certificates in the MatchPoint Android app

CVE-2026-111489 - A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform