TPC Software Matchpoint vulnerabilities and fixes
Exploited and high-severity TPC Software Matchpoint vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.9CVE-2026-111489A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platformVerify fixTPC Software Matchpoint
1 min read - 9.1CVE-2026-111494Incorrect validation of TLS certificates in the MatchPoint Android appVerify fixTPC Software Matchpoint
1 min read - 8.7CVE-2026-111493Lack of authentication and authorization in the Images.ashx endpoint in MatchPointVerify fixTPC Software Matchpoint
1 min read - 8.6CVE-2026-111492SQL injection in the push notification handler of the MatchPoint Android appVerify fixTPC Software Matchpoint
1 min read - 9.9CVE-2026-111490Insecure direct object reference (IDOR) vulnerability in the MatchPoint APIVerify fixTPC Software Matchpoint
1 min read